Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-25...er.exe

windows7-x64

9

2024-04-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-25_3b05b83bad2ea449253c73fc6f96d0d2_cryptolocker

  • Size

    42KB

  • Sample

    240425-e5geasfc66

  • MD5

    3b05b83bad2ea449253c73fc6f96d0d2

  • SHA1

    260b3ffbc4a527215dd4eeb42284c6097989e01d

  • SHA256

    33743ebaf50fc6aed826fac05a48d8a5f61701c73e40cb6104b45235e56f10b0

  • SHA512

    5e41eca41835e59b2491079fe65a163489146abc4d928744fc9008953d9b155636e0a66715e127c8c112ff19aa81688dc1e34d2e9d78e8f02daa5da4b6114ba0

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uye/:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZL/

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_3b05b83bad2ea449253c73fc6f96d0d2_cryptolocker

    • Size

      42KB

    • MD5

      3b05b83bad2ea449253c73fc6f96d0d2

    • SHA1

      260b3ffbc4a527215dd4eeb42284c6097989e01d

    • SHA256

      33743ebaf50fc6aed826fac05a48d8a5f61701c73e40cb6104b45235e56f10b0

    • SHA512

      5e41eca41835e59b2491079fe65a163489146abc4d928744fc9008953d9b155636e0a66715e127c8c112ff19aa81688dc1e34d2e9d78e8f02daa5da4b6114ba0

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznHzl6AJvDSuYlmoHR8uye/:b/yC4GyNM01GuQMNXw2PSjHPbSuYlZL/

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks