Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-08...er.exe

windows7-x64

9

2024-04-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-08_18b42dca86d3a8f4e5aa8bc4b6a3f2d6_cryptolocker

  • Size

    65KB

  • Sample

    240408-ss8vnsce45

  • MD5

    18b42dca86d3a8f4e5aa8bc4b6a3f2d6

  • SHA1

    d71647602b66752c05763d2a12c22567206f3fe7

  • SHA256

    c81d4a024057972cd3e8c8829b34fd8685e51493c3f5d3aa14f2f54659cc08a2

  • SHA512

    d0040cc4b9a16e3b8d92a98deb3f990268b65d157e8b400df52ad810547c5c95473b6a2e3e2331d07afda2f0c103dbbbd37fe31e573b5fc99cfde557cb855ec4

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10KmJS:6j+1NMOtEvwDpjr8ox8UDEy0KmY

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_18b42dca86d3a8f4e5aa8bc4b6a3f2d6_cryptolocker

    • Size

      65KB

    • MD5

      18b42dca86d3a8f4e5aa8bc4b6a3f2d6

    • SHA1

      d71647602b66752c05763d2a12c22567206f3fe7

    • SHA256

      c81d4a024057972cd3e8c8829b34fd8685e51493c3f5d3aa14f2f54659cc08a2

    • SHA512

      d0040cc4b9a16e3b8d92a98deb3f990268b65d157e8b400df52ad810547c5c95473b6a2e3e2331d07afda2f0c103dbbbd37fe31e573b5fc99cfde557cb855ec4

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10KmJS:6j+1NMOtEvwDpjr8ox8UDEy0KmY

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks