Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-22...er.exe

windows7-x64

9

2024-04-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-22_16832b29be07cf2f716a95e0d6f01c59_cryptolocker

  • Size

    37KB

  • Sample

    240422-v2g5esdh65

  • MD5

    16832b29be07cf2f716a95e0d6f01c59

  • SHA1

    265442252fcf025708d6cc66f0c479afd92fc116

  • SHA256

    c2bd32e605c91b907fb8ac0269b78fb1fd8126ae40c6a0392ff6d025ff29cb39

  • SHA512

    582db0fde827f1b71769a188e6912f02d23a644c89fe1b700a9a220b5b89cf47449a4784119f033626050d5548dae9e291bb56ad4a96709633200882941607f0

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw08:X6QFElP6n+gJQMOtEvwDpjBmzDU58

Score
10/10

Malware Config

Targets

    • Target

      2024-04-22_16832b29be07cf2f716a95e0d6f01c59_cryptolocker

    • Size

      37KB

    • MD5

      16832b29be07cf2f716a95e0d6f01c59

    • SHA1

      265442252fcf025708d6cc66f0c479afd92fc116

    • SHA256

      c2bd32e605c91b907fb8ac0269b78fb1fd8126ae40c6a0392ff6d025ff29cb39

    • SHA512

      582db0fde827f1b71769a188e6912f02d23a644c89fe1b700a9a220b5b89cf47449a4784119f033626050d5548dae9e291bb56ad4a96709633200882941607f0

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCw08:X6QFElP6n+gJQMOtEvwDpjBmzDU58

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks