Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-28...er.exe

windows7-x64

9

2024-04-28...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_1c0ba3fecb4fce6c0e4ee9bc43e9fb5e_cryptolocker

  • Size

    41KB

  • Sample

    240428-nj6lqsef29

  • MD5

    1c0ba3fecb4fce6c0e4ee9bc43e9fb5e

  • SHA1

    f1e17181bc011eccd9dd743f25b4e08365df65c6

  • SHA256

    2e7f3b77a9ca84c90a8e849b92a9001342725a456df28b56b8a7dc4152936a0c

  • SHA512

    9b59eff7d9802bcb5aaad66db3e3fffda809b89ccd1aa2e13f8bc450b998c71afb6a61bbaa06b847bf6b82893d69d94f7abc10319b3f162a0cb3c1ed4e7ebab7

  • SSDEEP

    768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/Jc:bAvJCF+RQgJeab4sy/lu

Score
10/10

Malware Config

Targets

    • Target

      2024-04-28_1c0ba3fecb4fce6c0e4ee9bc43e9fb5e_cryptolocker

    • Size

      41KB

    • MD5

      1c0ba3fecb4fce6c0e4ee9bc43e9fb5e

    • SHA1

      f1e17181bc011eccd9dd743f25b4e08365df65c6

    • SHA256

      2e7f3b77a9ca84c90a8e849b92a9001342725a456df28b56b8a7dc4152936a0c

    • SHA512

      9b59eff7d9802bcb5aaad66db3e3fffda809b89ccd1aa2e13f8bc450b998c71afb6a61bbaa06b847bf6b82893d69d94f7abc10319b3f162a0cb3c1ed4e7ebab7

    • SSDEEP

      768:bAvJCYOOvbRPDEgXrNekd7l94i3py/yY/Jc:bAvJCF+RQgJeab4sy/lu

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks