Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-05...er.exe

windows7-x64

9

2024-04-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-05_636da7fc96f802082b1abc05c67ebb2e_cryptolocker

  • Size

    44KB

  • Sample

    240405-n1yx8abf74

  • MD5

    636da7fc96f802082b1abc05c67ebb2e

  • SHA1

    576c3f4e17788230781d3cb1e4517f32fb1fec5b

  • SHA256

    d527959052d10b5b0b1d3424c023daaa14a714d3959e7286de0c83c8a705ffd9

  • SHA512

    69f59199ff94a990b7adcdb5fe17ffd6ea04919db12fd4ff013e4b0b2e8d18dfc8f7cfc3b9948c8b43a93c13add707cff421e8d9d93b6db010de003033353e0c

  • SSDEEP

    768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx5:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_636da7fc96f802082b1abc05c67ebb2e_cryptolocker

    • Size

      44KB

    • MD5

      636da7fc96f802082b1abc05c67ebb2e

    • SHA1

      576c3f4e17788230781d3cb1e4517f32fb1fec5b

    • SHA256

      d527959052d10b5b0b1d3424c023daaa14a714d3959e7286de0c83c8a705ffd9

    • SHA512

      69f59199ff94a990b7adcdb5fe17ffd6ea04919db12fd4ff013e4b0b2e8d18dfc8f7cfc3b9948c8b43a93c13add707cff421e8d9d93b6db010de003033353e0c

    • SSDEEP

      768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx5:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xw

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks