Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
0s -
max time network
9s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
17/04/2024, 19:57
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_dc300d8889c70e7f77beb500af97f1b2_cryptolocker.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-04-17_dc300d8889c70e7f77beb500af97f1b2_cryptolocker.exe
Resource
win10v2004-20240412-en
Errors
General
-
Target
2024-04-17_dc300d8889c70e7f77beb500af97f1b2_cryptolocker.exe
-
Size
36KB
-
MD5
dc300d8889c70e7f77beb500af97f1b2
-
SHA1
5f9c47dfe11599b7d5bce196b97f5d185f399f79
-
SHA256
a57e262f17a4bdec33ba332ff6f621dca8775b41d6b14a6db910315a77a6248e
-
SHA512
16bd00bcb1ccbfe0e025401b9c532a1bc731ef59fcdedfd03de76a31205158ebd49cbd5aa85dd9943bba0293e2ae717309304af702ffda07066d99850c2f7c7c
-
SSDEEP
384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3qE4kb6oY26z:b7o/2n1TCraU6GD1a4Xt9bRU6zA6o36z
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
resource yara_rule behavioral2/files/0x000300000001e9b1-12.dat CryptoLocker_rule2 -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-17_dc300d8889c70e7f77beb500af97f1b2_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-17_dc300d8889c70e7f77beb500af97f1b2_cryptolocker.exe"1⤵PID:1544
-
C:\Users\Admin\AppData\Local\Temp\rewok.exe"C:\Users\Admin\AppData\Local\Temp\rewok.exe"2⤵PID:2240
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD5f02268c0d18bdcd18397ab37a39ef4c0
SHA195032316327800130665cf8a0fb348212e332d1b
SHA256f006636503de2c0c338284d7365d6cdc7f3c187eb95652184e2150b388a02a08
SHA51271b4acb2e4499485dabd256d234ceb00bf39c0508f50bb1086c93e920f249f7157c4c3bc616882db5d24d5f3349c790284f40b36b63cc8a5a73fce3e6870c24e