Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-15...er.exe

windows7-x64

9

2024-04-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-15_c8727e57bf7f7233e7c3f98a39a24dbe_cryptolocker

  • Size

    83KB

  • Sample

    240415-3j8hnadc7w

  • MD5

    c8727e57bf7f7233e7c3f98a39a24dbe

  • SHA1

    21f6ebe009a3c4e9a02298d965e6c257f09421ec

  • SHA256

    8dfd3286977d3b2a69aac4b0480a70ac1e9a018c3f4f7844f0268509943602a4

  • SHA512

    fee4957cd3638cb670eaee5df691a81b219b3a7af49972f3707b372e0057e5dc3761f22ca205c4b930e6a0c36bbbb8900c7d8885028c2af515e49398539581d8

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCc:TCjsIOtEvwDpj5HE/OUHnSMp

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_c8727e57bf7f7233e7c3f98a39a24dbe_cryptolocker

    • Size

      83KB

    • MD5

      c8727e57bf7f7233e7c3f98a39a24dbe

    • SHA1

      21f6ebe009a3c4e9a02298d965e6c257f09421ec

    • SHA256

      8dfd3286977d3b2a69aac4b0480a70ac1e9a018c3f4f7844f0268509943602a4

    • SHA512

      fee4957cd3638cb670eaee5df691a81b219b3a7af49972f3707b372e0057e5dc3761f22ca205c4b930e6a0c36bbbb8900c7d8885028c2af515e49398539581d8

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrCc:TCjsIOtEvwDpj5HE/OUHnSMp

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks