Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-09...er.exe

windows7-x64

9

2024-04-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-09_f3114c9552866871bd30c79e26f341a9_cryptolocker

  • Size

    133KB

  • Sample

    240409-s6lmasef5z

  • MD5

    f3114c9552866871bd30c79e26f341a9

  • SHA1

    184af4de2eef2e154e128898b367577c3fe854dc

  • SHA256

    4d48b94aadde388e5e362105482c6d0d166ae434efb5b6f844b7cecb039324e2

  • SHA512

    4e1ed227a08857010a8c51f8381d16dcce5c115f8ebac96600c736d1970419899d2eaf625ed1b1e2ab2afa058b6bde76a3b1353f7676c94ef07d90ba9942eedf

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQblPgy:V6a+pOtEvwDpjt22P

Score
10/10

Malware Config

Targets

    • Target

      2024-04-09_f3114c9552866871bd30c79e26f341a9_cryptolocker

    • Size

      133KB

    • MD5

      f3114c9552866871bd30c79e26f341a9

    • SHA1

      184af4de2eef2e154e128898b367577c3fe854dc

    • SHA256

      4d48b94aadde388e5e362105482c6d0d166ae434efb5b6f844b7cecb039324e2

    • SHA512

      4e1ed227a08857010a8c51f8381d16dcce5c115f8ebac96600c736d1970419899d2eaf625ed1b1e2ab2afa058b6bde76a3b1353f7676c94ef07d90ba9942eedf

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbxGYQbxGYQblPgy:V6a+pOtEvwDpjt22P

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks