Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-11_327b653086abce1916842fa455f7ea60_cryptolocker

  • Size

    43KB

  • Sample

    240512-z2plqaga4x

  • MD5

    327b653086abce1916842fa455f7ea60

  • SHA1

    aa4a1e996ac8c0085f980bd0df7ffcb58ed9edc6

  • SHA256

    cec3775f7f23bd928bc9ecbdabe164c1dce021ed884e17763da10da21418fbf3

  • SHA512

    8f8949784a98a22112ba2ab4e461579122364402f520e0065d0d0c64b26db06ad0e4509f36d79cfb07605c42fbcfbb9f4c8877379f985a1ad121ae7afa4c93af

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRp5jd:m5nkFNMOtEvwDpjG8hhXj5R

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_327b653086abce1916842fa455f7ea60_cryptolocker

    • Size

      43KB

    • MD5

      327b653086abce1916842fa455f7ea60

    • SHA1

      aa4a1e996ac8c0085f980bd0df7ffcb58ed9edc6

    • SHA256

      cec3775f7f23bd928bc9ecbdabe164c1dce021ed884e17763da10da21418fbf3

    • SHA512

      8f8949784a98a22112ba2ab4e461579122364402f520e0065d0d0c64b26db06ad0e4509f36d79cfb07605c42fbcfbb9f4c8877379f985a1ad121ae7afa4c93af

    • SSDEEP

      768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRp5jd:m5nkFNMOtEvwDpjG8hhXj5R

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks