Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-23...er.exe

windows7-x64

9

2024-05-23...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_222c02d067a4d06f0822d62b65c1c3e4_cryptolocker

  • Size

    48KB

  • Sample

    240523-ezwa9sdg55

  • MD5

    222c02d067a4d06f0822d62b65c1c3e4

  • SHA1

    df8a407a74cb78db7cd42a4de61314649399c912

  • SHA256

    27a0bf3c76c8328613e85b9a20ba3e6d2cdd98c50963c3d97e8989236ddb4928

  • SHA512

    f792af0a30147ccf65d9ea92d585d8a6b0922960db384eedc55ac63e1b68387a77504f380627e77c7e3fec8f8fbd83c8a00c5a027fbc015ce7a7655fce9d103f

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhAj:xj+VGMOtEvwDpjy+TRhE

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_222c02d067a4d06f0822d62b65c1c3e4_cryptolocker

    • Size

      48KB

    • MD5

      222c02d067a4d06f0822d62b65c1c3e4

    • SHA1

      df8a407a74cb78db7cd42a4de61314649399c912

    • SHA256

      27a0bf3c76c8328613e85b9a20ba3e6d2cdd98c50963c3d97e8989236ddb4928

    • SHA512

      f792af0a30147ccf65d9ea92d585d8a6b0922960db384eedc55ac63e1b68387a77504f380627e77c7e3fec8f8fbd83c8a00c5a027fbc015ce7a7655fce9d103f

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRhAj:xj+VGMOtEvwDpjy+TRhE

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks