Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-11...er.exe

windows7-x64

9

2024-05-11...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-11_291b9aa3bc60a78846d5b31d981097f7_cryptolocker

  • Size

    68KB

  • Sample

    240512-zpbt4afc8y

  • MD5

    291b9aa3bc60a78846d5b31d981097f7

  • SHA1

    60effce7bd2b7bd5f294689ec5980f2a80d1651a

  • SHA256

    0e2ef5bd176bad6546f7b29acb0732a24a0e565cd4675df7169ff4a63ee76b08

  • SHA512

    0b42636cee3a29988b82a1964aee9bf55838d8f7f52a0d90b974dfa2ee4b8b46bda11d3e2066232eed57accebe2480d747969c29529cdb6e6ff51b0e2f0135f8

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLlY:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7j

Score
10/10

Malware Config

Targets

    • Target

      2024-05-11_291b9aa3bc60a78846d5b31d981097f7_cryptolocker

    • Size

      68KB

    • MD5

      291b9aa3bc60a78846d5b31d981097f7

    • SHA1

      60effce7bd2b7bd5f294689ec5980f2a80d1651a

    • SHA256

      0e2ef5bd176bad6546f7b29acb0732a24a0e565cd4675df7169ff4a63ee76b08

    • SHA512

      0b42636cee3a29988b82a1964aee9bf55838d8f7f52a0d90b974dfa2ee4b8b46bda11d3e2066232eed57accebe2480d747969c29529cdb6e6ff51b0e2f0135f8

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLlY:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7j

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks