Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_91a0811ee0fc3e402d14ff185739305d_cryptolocker

  • Size

    40KB

  • Sample

    240428-fcs33agf3x

  • MD5

    91a0811ee0fc3e402d14ff185739305d

  • SHA1

    d835d2d94ad8afc38b2efab6738b72814c5ce36b

  • SHA256

    96f32c3069af25d5183ef7f4d50c154f94bb2fb4ffbc3f155cd4f92a042217a3

  • SHA512

    281841dc34705778a255310de20a9c9da5510658e556f175268c1183e71994b42bb12206d94251100d7014d63e475cbcc9d4c0e436f614abc17cebc4a541b232

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/Etx:btB9g/WItCSsAGjX7e9N0hunKLYUx

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_91a0811ee0fc3e402d14ff185739305d_cryptolocker

    • Size

      40KB

    • MD5

      91a0811ee0fc3e402d14ff185739305d

    • SHA1

      d835d2d94ad8afc38b2efab6738b72814c5ce36b

    • SHA256

      96f32c3069af25d5183ef7f4d50c154f94bb2fb4ffbc3f155cd4f92a042217a3

    • SHA512

      281841dc34705778a255310de20a9c9da5510658e556f175268c1183e71994b42bb12206d94251100d7014d63e475cbcc9d4c0e436f614abc17cebc4a541b232

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/Etx:btB9g/WItCSsAGjX7e9N0hunKLYUx

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks