Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-19...er.exe

windows7-x64

9

2024-05-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-19_60c5af849bf3a02d9ca3f3329548bc37_cryptolocker

  • Size

    46KB

  • Sample

    240519-y813nagc85

  • MD5

    60c5af849bf3a02d9ca3f3329548bc37

  • SHA1

    2251a273aec74cb9a1690481fbfb2259cf388c43

  • SHA256

    2270328cc4bb6060fa776d6d67fc1d5cfdf0ada5fcdb7a727f775d94066a2cb0

  • SHA512

    04bd11f41d7650a70139dc8b88451a701d3739f8894d8744b7e9ffbf3bd321a000a3224271f1901d8dc55cbf1b3cb0214523b4fb09f2167af8cf48b119be504d

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoL4:qmbhXDmjr5MOtEvwDpj5cDtKkQZQO

Score
10/10

Malware Config

Targets

    • Target

      2024-05-19_60c5af849bf3a02d9ca3f3329548bc37_cryptolocker

    • Size

      46KB

    • MD5

      60c5af849bf3a02d9ca3f3329548bc37

    • SHA1

      2251a273aec74cb9a1690481fbfb2259cf388c43

    • SHA256

      2270328cc4bb6060fa776d6d67fc1d5cfdf0ada5fcdb7a727f775d94066a2cb0

    • SHA512

      04bd11f41d7650a70139dc8b88451a701d3739f8894d8744b7e9ffbf3bd321a000a3224271f1901d8dc55cbf1b3cb0214523b4fb09f2167af8cf48b119be504d

    • SSDEEP

      768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoL4:qmbhXDmjr5MOtEvwDpj5cDtKkQZQO

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks