Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-17...er.exe

windows7-x64

9

2024-04-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-17_9c9aa3cad9f40308b97931e2c7c2ef9d_cryptolocker

  • Size

    39KB

  • Sample

    240417-ellvnsef4x

  • MD5

    9c9aa3cad9f40308b97931e2c7c2ef9d

  • SHA1

    688c019df2aa1cec1b80c8d7421b7052d1948697

  • SHA256

    a2457945df98b09187fb11a5e5d279d42c65d66f3fed35e2f6e066cb08c4312e

  • SHA512

    67f2090d10df3d7696d0a8dc6612d1192c86114b52075ce93d5bcdd3ff2110edfb4254fe8684f5715c00b21f333092326db5c0140f7536a6500e8eda95df830c

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpb:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLF

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_9c9aa3cad9f40308b97931e2c7c2ef9d_cryptolocker

    • Size

      39KB

    • MD5

      9c9aa3cad9f40308b97931e2c7c2ef9d

    • SHA1

      688c019df2aa1cec1b80c8d7421b7052d1948697

    • SHA256

      a2457945df98b09187fb11a5e5d279d42c65d66f3fed35e2f6e066cb08c4312e

    • SHA512

      67f2090d10df3d7696d0a8dc6612d1192c86114b52075ce93d5bcdd3ff2110edfb4254fe8684f5715c00b21f333092326db5c0140f7536a6500e8eda95df830c

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLpb:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks