Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-06...er.exe

windows7-x64

9

2024-04-06...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-06_d04b0a4aa0ccc4e58ff177fe640d8970_cryptolocker

  • Size

    38KB

  • Sample

    240406-fn7qlaca43

  • MD5

    d04b0a4aa0ccc4e58ff177fe640d8970

  • SHA1

    b2bff18cd5dd3e637f68dd29545145e348d258aa

  • SHA256

    ec2443a6c52bae593591b1ca9686ee9a268747b2e3436f76b7024204bac1845c

  • SHA512

    f51328aa00d1e2ab8c3508b368d6e86dd18771d683ce76414710bd8215a9b49787d79350f31df545e7b787276eaecde9d1c5a56b004106a5fc90d48a02963abb

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzrB:vj+jsMQMOtEvwDpj5HcSY/B

Score
10/10

Malware Config

Targets

    • Target

      2024-04-06_d04b0a4aa0ccc4e58ff177fe640d8970_cryptolocker

    • Size

      38KB

    • MD5

      d04b0a4aa0ccc4e58ff177fe640d8970

    • SHA1

      b2bff18cd5dd3e637f68dd29545145e348d258aa

    • SHA256

      ec2443a6c52bae593591b1ca9686ee9a268747b2e3436f76b7024204bac1845c

    • SHA512

      f51328aa00d1e2ab8c3508b368d6e86dd18771d683ce76414710bd8215a9b49787d79350f31df545e7b787276eaecde9d1c5a56b004106a5fc90d48a02963abb

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/UkRYzrB:vj+jsMQMOtEvwDpj5HcSY/B

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks