Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-15...er.exe

windows7-x64

9

2024-04-15...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-15_6409de6ec0952f0445d63163e70d08b3_cryptolocker

  • Size

    50KB

  • Sample

    240415-nt9q5sfg9t

  • MD5

    6409de6ec0952f0445d63163e70d08b3

  • SHA1

    424ef9eae4bb8d9a221d13d5c29f9bb1c3965ed7

  • SHA256

    8e769e8c8fdd8ee323d41223fb1b0a01a7b81d608931fbaa44f93713cac61745

  • SHA512

    372348a976a93e706d2999d9dfea70cc88617c73daf9bdc21ce229d3f741a873375714807145a7ff3637a6f80571190e2044279e6a8b5b5445fde7b3a071e6c5

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfg:79mqyNhQMOtEvwDpjBxe8GGfg

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_6409de6ec0952f0445d63163e70d08b3_cryptolocker

    • Size

      50KB

    • MD5

      6409de6ec0952f0445d63163e70d08b3

    • SHA1

      424ef9eae4bb8d9a221d13d5c29f9bb1c3965ed7

    • SHA256

      8e769e8c8fdd8ee323d41223fb1b0a01a7b81d608931fbaa44f93713cac61745

    • SHA512

      372348a976a93e706d2999d9dfea70cc88617c73daf9bdc21ce229d3f741a873375714807145a7ff3637a6f80571190e2044279e6a8b5b5445fde7b3a071e6c5

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfg:79mqyNhQMOtEvwDpjBxe8GGfg

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks