Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-25...er.exe

windows7-x64

9

2024-04-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-25_aa3d4bc4abed726b03ba43f51fcf572e_cryptolocker

  • Size

    45KB

  • Sample

    240425-qryl7sbc38

  • MD5

    aa3d4bc4abed726b03ba43f51fcf572e

  • SHA1

    492ba74d8ed959a70b3bf8867084855532974a7c

  • SHA256

    ee4f585baa124a5c4a84ea83c04663970570029d43747c1ad0e29ead91772d5e

  • SHA512

    393df9eb79aa86e9d27695c36b90e57fe6eb5c2cb4b8629e25945b25d87df3f573b84c39a7f2eda5bd1c4978673b8304c31da8c1b7c56d1bc8c0f68b8c850d9d

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPND:P6QFElP6k+MRQMOtEvwDpjBQpVXED

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_aa3d4bc4abed726b03ba43f51fcf572e_cryptolocker

    • Size

      45KB

    • MD5

      aa3d4bc4abed726b03ba43f51fcf572e

    • SHA1

      492ba74d8ed959a70b3bf8867084855532974a7c

    • SHA256

      ee4f585baa124a5c4a84ea83c04663970570029d43747c1ad0e29ead91772d5e

    • SHA512

      393df9eb79aa86e9d27695c36b90e57fe6eb5c2cb4b8629e25945b25d87df3f573b84c39a7f2eda5bd1c4978673b8304c31da8c1b7c56d1bc8c0f68b8c850d9d

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPND:P6QFElP6k+MRQMOtEvwDpjBQpVXED

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks