Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-08...er.exe

windows7-x64

9

2024-04-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-08_0de2d49634e9eb50d54dbecc611e12ff_cryptolocker

  • Size

    50KB

  • Sample

    240409-shdxjsac54

  • MD5

    0de2d49634e9eb50d54dbecc611e12ff

  • SHA1

    d2c959c3e42d4ee2a06b34a12b7a08aa15b2407a

  • SHA256

    eeb09b710aa55df326e611e2491f25075e4c3ea729f37c2e4db960e8a3c30b5b

  • SHA512

    4a9ad6fae27cedd59b6d057693d89051f8d44b415daff645bdc486af317d0146c6c395a02c9166536689a2e5f1a68708be1e6ee2cdf0dd6aebc04cabc61adf28

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcXaG:X6QFElP6n+gJBMOtEvwDpjBtExmlk

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_0de2d49634e9eb50d54dbecc611e12ff_cryptolocker

    • Size

      50KB

    • MD5

      0de2d49634e9eb50d54dbecc611e12ff

    • SHA1

      d2c959c3e42d4ee2a06b34a12b7a08aa15b2407a

    • SHA256

      eeb09b710aa55df326e611e2491f25075e4c3ea729f37c2e4db960e8a3c30b5b

    • SHA512

      4a9ad6fae27cedd59b6d057693d89051f8d44b415daff645bdc486af317d0146c6c395a02c9166536689a2e5f1a68708be1e6ee2cdf0dd6aebc04cabc61adf28

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcXaG:X6QFElP6n+gJBMOtEvwDpjBtExmlk

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks