Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-10...er.exe

windows7-x64

9

2024-04-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-10_4c0248a768b89b2a91cd7581271329f5_cryptolocker

  • Size

    64KB

  • Sample

    240410-y72ykaaf92

  • MD5

    4c0248a768b89b2a91cd7581271329f5

  • SHA1

    224c13ff133c79385643852172dceb3e4ae5bb88

  • SHA256

    479b382a345f0e2e28d590629717f50dc27937a38f76b6565c7a13e0a844d09e

  • SHA512

    6b94c05fb6aa98b5dec29ab7067effe73a07947ee63608f12a89b9f380e59d06ad144dc8f3615f884f082eceb3b933ff48bae9e8fc2d9e64c8b6cac36d53da69

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10Km9tMe:6j+1NMOtEvwDpjr8ox8UDEy0Kmj

Score
10/10

Malware Config

Targets

    • Target

      2024-04-10_4c0248a768b89b2a91cd7581271329f5_cryptolocker

    • Size

      64KB

    • MD5

      4c0248a768b89b2a91cd7581271329f5

    • SHA1

      224c13ff133c79385643852172dceb3e4ae5bb88

    • SHA256

      479b382a345f0e2e28d590629717f50dc27937a38f76b6565c7a13e0a844d09e

    • SHA512

      6b94c05fb6aa98b5dec29ab7067effe73a07947ee63608f12a89b9f380e59d06ad144dc8f3615f884f082eceb3b933ff48bae9e8fc2d9e64c8b6cac36d53da69

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10Km9tMe:6j+1NMOtEvwDpjr8ox8UDEy0Kmj

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks