Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-21...er.exe

windows7-x64

9

2024-05-21...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-21_6b83e1e1fc9102152413bb6eec1ff64d_cryptolocker

  • Size

    44KB

  • Sample

    240521-fk3mgaac8x

  • MD5

    6b83e1e1fc9102152413bb6eec1ff64d

  • SHA1

    75f25eb36dc5bf03dea4bedc20a7bfef31dc4ed4

  • SHA256

    1a48dfbb4c3c998eb928f3c28d64434c35ae140c1e26b7463b23285e3d866dac

  • SHA512

    af77bd1fe87a1a32d6cdf0843f5b70544b72d201b314480226220702fe01a4ca7dc061ec3701e7ebe6ddbe14f4a9523e481f6402d7b3e6bcc4bc5f61e05cf805

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpEui0U30j:bm74zYcgT/Ekn0ryfjLu5j

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_6b83e1e1fc9102152413bb6eec1ff64d_cryptolocker

    • Size

      44KB

    • MD5

      6b83e1e1fc9102152413bb6eec1ff64d

    • SHA1

      75f25eb36dc5bf03dea4bedc20a7bfef31dc4ed4

    • SHA256

      1a48dfbb4c3c998eb928f3c28d64434c35ae140c1e26b7463b23285e3d866dac

    • SHA512

      af77bd1fe87a1a32d6cdf0843f5b70544b72d201b314480226220702fe01a4ca7dc061ec3701e7ebe6ddbe14f4a9523e481f6402d7b3e6bcc4bc5f61e05cf805

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpEui0U30j:bm74zYcgT/Ekn0ryfjLu5j

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks