Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-03...er.exe

windows7-x64

9

2024-05-03...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-03_88c5a5e1e0a4fcaf8061c7dd6364e4de_cryptolocker

  • Size

    63KB

  • Sample

    240503-3gnepsbd97

  • MD5

    88c5a5e1e0a4fcaf8061c7dd6364e4de

  • SHA1

    8001bf6eb2780444084f132c3c84ba132b1e1d7e

  • SHA256

    03aaf69b5743766011decf3fd8eab699db05ac686447ec84459995ecf46a639f

  • SHA512

    0eaa193c6c66c44a096cd88ecbd16d20188c4d662cb9953840a3007edeab2767995ce2ec7e1bb8cc93f8f764f0b28c3de3a7f14f67edb204dd841ef4b217b170

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi+:BbdDmjr+OtEvwDpjM8b

Score
10/10

Malware Config

Targets

    • Target

      2024-05-03_88c5a5e1e0a4fcaf8061c7dd6364e4de_cryptolocker

    • Size

      63KB

    • MD5

      88c5a5e1e0a4fcaf8061c7dd6364e4de

    • SHA1

      8001bf6eb2780444084f132c3c84ba132b1e1d7e

    • SHA256

      03aaf69b5743766011decf3fd8eab699db05ac686447ec84459995ecf46a639f

    • SHA512

      0eaa193c6c66c44a096cd88ecbd16d20188c4d662cb9953840a3007edeab2767995ce2ec7e1bb8cc93f8f764f0b28c3de3a7f14f67edb204dd841ef4b217b170

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsi+:BbdDmjr+OtEvwDpjM8b

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks