Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-09_1bb5687f62f9391e1a9df74a5f4cc587_cryptolocker

  • Size

    75KB

  • Sample

    240409-mhsstaga4x

  • MD5

    1bb5687f62f9391e1a9df74a5f4cc587

  • SHA1

    a1bb54146245216352161fd444bb99ded6f47a4f

  • SHA256

    f64c235457a9da8efbc83d627beeb96cccc96feb7559d28d92fb4b35dbc199f1

  • SHA512

    8da4201c4f76f2ebeb25c7253e5f276a660f95d0411b1af128426a8b8445b05c653a9917943eae429b1caa2d101b401f79b16f2653b4963d2d102a4f840d87bd

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMOl:X6a+SOtEvwDpjBZYvQd27

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_1bb5687f62f9391e1a9df74a5f4cc587_cryptolocker

    • Size

      75KB

    • MD5

      1bb5687f62f9391e1a9df74a5f4cc587

    • SHA1

      a1bb54146245216352161fd444bb99ded6f47a4f

    • SHA256

      f64c235457a9da8efbc83d627beeb96cccc96feb7559d28d92fb4b35dbc199f1

    • SHA512

      8da4201c4f76f2ebeb25c7253e5f276a660f95d0411b1af128426a8b8445b05c653a9917943eae429b1caa2d101b401f79b16f2653b4963d2d102a4f840d87bd

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1siMOl:X6a+SOtEvwDpjBZYvQd27

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks