Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_c96c607d1f7f0b650039721b5cd1def8_cryptolocker

  • Size

    42KB

  • Sample

    240428-fghswsgf91

  • MD5

    c96c607d1f7f0b650039721b5cd1def8

  • SHA1

    8bdcd3780c85808d9399c7ceb7ce808f0a46f7c7

  • SHA256

    3ac37b61ddbb752b305062321808581c830026e3dc661f5974348b528812fd77

  • SHA512

    d22c7ca761314f4b9971a9e9584825c8021d99631511bd37793aee8d1c9b6c386981f9e2f76ab4ff7b7b638b9882c5bcb70a512750eaf2671cdcae7a09093c8f

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRY+iyD0:m5nkFNMOtEvwDpjG8hhXy+iyD0

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_c96c607d1f7f0b650039721b5cd1def8_cryptolocker

    • Size

      42KB

    • MD5

      c96c607d1f7f0b650039721b5cd1def8

    • SHA1

      8bdcd3780c85808d9399c7ceb7ce808f0a46f7c7

    • SHA256

      3ac37b61ddbb752b305062321808581c830026e3dc661f5974348b528812fd77

    • SHA512

      d22c7ca761314f4b9971a9e9584825c8021d99631511bd37793aee8d1c9b6c386981f9e2f76ab4ff7b7b638b9882c5bcb70a512750eaf2671cdcae7a09093c8f

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRY+iyD0:m5nkFNMOtEvwDpjG8hhXy+iyD0

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks