Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-17...er.exe

windows7-x64

9

2024-05-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-17_285d3588870195d7d192837154fe4a16_cryptolocker

  • Size

    38KB

  • Sample

    240517-mf7h7adf4v

  • MD5

    285d3588870195d7d192837154fe4a16

  • SHA1

    c818a0a01a584f4b6a735bffe80cfd8686d44683

  • SHA256

    0a241e70badc29bedf3dbb1201ee849a4e688b40ebaa5a48c0b4fdf516dd3e60

  • SHA512

    9ab8324f70a0b1b3a68ef6dfd022d7849a665f26f95b544eeb7f283f1be7006db87548cdd2e0b946a88601628c2d9c0a2a4833d311894634fbed6b2591dd5edf

  • SSDEEP

    384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3V6uVjhbuUZ:b7o/2n1TCraU6GD1a4Xt9bRUlV5hbbZ

Score
10/10

Malware Config

Targets

    • Target

      2024-05-17_285d3588870195d7d192837154fe4a16_cryptolocker

    • Size

      38KB

    • MD5

      285d3588870195d7d192837154fe4a16

    • SHA1

      c818a0a01a584f4b6a735bffe80cfd8686d44683

    • SHA256

      0a241e70badc29bedf3dbb1201ee849a4e688b40ebaa5a48c0b4fdf516dd3e60

    • SHA512

      9ab8324f70a0b1b3a68ef6dfd022d7849a665f26f95b544eeb7f283f1be7006db87548cdd2e0b946a88601628c2d9c0a2a4833d311894634fbed6b2591dd5edf

    • SSDEEP

      384:bmM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzoCt9/B1RU3V6uVjhbuUZ:b7o/2n1TCraU6GD1a4Xt9bRUlV5hbbZ

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks