Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-08...er.exe

windows7-x64

9

2024-04-08...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-08_30158bcc4f0652945d4ad0270804bd70_cryptolocker

  • Size

    40KB

  • Sample

    240409-tnvmxsfc7y

  • MD5

    30158bcc4f0652945d4ad0270804bd70

  • SHA1

    02c2178cef1815e7ceae75dba6fb3b9ed9cf0b9c

  • SHA256

    71185f7e1ef8edb72fcbd6532fb9741c58a29df342ba4ccba98fdd4d2b571557

  • SHA512

    93c8766c0a853da392d1e679a80c2de8eb2b30b72bdb055e5694b9cedda2682fac4e865ab324b5c9f61c482a31b4138545446b2765a6c9448e0044a0318d57a8

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UsC:bAvJCYOOvbRPDEgXrNekd7l94i3py/yW

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_30158bcc4f0652945d4ad0270804bd70_cryptolocker

    • Size

      40KB

    • MD5

      30158bcc4f0652945d4ad0270804bd70

    • SHA1

      02c2178cef1815e7ceae75dba6fb3b9ed9cf0b9c

    • SHA256

      71185f7e1ef8edb72fcbd6532fb9741c58a29df342ba4ccba98fdd4d2b571557

    • SHA512

      93c8766c0a853da392d1e679a80c2de8eb2b30b72bdb055e5694b9cedda2682fac4e865ab324b5c9f61c482a31b4138545446b2765a6c9448e0044a0318d57a8

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3Nby6UsC:bAvJCYOOvbRPDEgXrNekd7l94i3py/yW

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks