Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-29...er.exe

windows7-x64

9

2024-04-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-29_56fa6e2895a70720f80e64c5144571cc_cryptolocker

  • Size

    42KB

  • Sample

    240429-r9rr2sdc65

  • MD5

    56fa6e2895a70720f80e64c5144571cc

  • SHA1

    f7679efe02f8adc49f7edf4fe507b8b8e9afd3ba

  • SHA256

    70e6a3c24708a35e6d951200b3e8fb5ba64cea0cd16c8fb6ce974472e70563ac

  • SHA512

    11c26033594f0d100aa3a8e877395a046fd4e77f2e434b61a6e0a47f200cdfad8ba01d4c47f4ce9fe0c1b7fb49c582937dc1ecbbeb901b28428037f3627ceec7

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUc:bm74zYcgT/Ekn0ryfjF

Score
10/10

Malware Config

Targets

    • Target

      2024-04-29_56fa6e2895a70720f80e64c5144571cc_cryptolocker

    • Size

      42KB

    • MD5

      56fa6e2895a70720f80e64c5144571cc

    • SHA1

      f7679efe02f8adc49f7edf4fe507b8b8e9afd3ba

    • SHA256

      70e6a3c24708a35e6d951200b3e8fb5ba64cea0cd16c8fb6ce974472e70563ac

    • SHA512

      11c26033594f0d100aa3a8e877395a046fd4e77f2e434b61a6e0a47f200cdfad8ba01d4c47f4ce9fe0c1b7fb49c582937dc1ecbbeb901b28428037f3627ceec7

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUc:bm74zYcgT/Ekn0ryfjF

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks