Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
29/05/2024, 06:51
General
-
Target
2024-05-29_c11c407ac30f2b089fe5fddc8ea8beb7_cryptolocker.exe
-
Size
60KB
-
MD5
c11c407ac30f2b089fe5fddc8ea8beb7
-
SHA1
3a2ba2b5f494f0c5080c582aefc064ffdcd8f169
-
SHA256
44f02259fc6644458354305ab08eff281d162e460bdc12411f589dd20b567adb
-
SHA512
6fc53b715617a04f888cf87a8ef86cf6e15467207904e421fcc955adcc064f64e1d452b3e65385cd3467dbc6b07b2a4d7cfe80df2b9f7b54afdc7dc9f1284a10
-
SSDEEP
768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP6pINx:H6QFElP6n+gou9cvMOtEvwDpjCpVXiNx
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 5 IoCs
-
UPX dump on OEP (original entry point) 5 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-29_c11c407ac30f2b089fe5fddc8ea8beb7_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-29_c11c407ac30f2b089fe5fddc8ea8beb7_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
MD53dce5386bfb175944036777c7e0dddd7
SHA1c93d8c808e0e9df8ca695027c0c02c60afb5b5e3
SHA256eae2fd113cbbc418fa423190e664fd7fb12238240928301956b9fedea10905a4
SHA512c91d5fd40a55685ba90e3772002cb2162bcfb55a5236606f269b998046da3bb61d488c8e03844240feb1dd10a2d1d6b6fb3c2f120c7a6c0a0a938b91233eaf14
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB