Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-29...er.exe

windows7-x64

9

2024-05-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-29_c4a73623176b8f8f88f7ca41e20635b9_cryptolocker

  • Size

    46KB

  • Sample

    240529-pqra3afb72

  • MD5

    c4a73623176b8f8f88f7ca41e20635b9

  • SHA1

    a9f0fd11d70a69b71b0c10a69a4073020af3cc70

  • SHA256

    12439bfc474adb3f6d3439f9a157225c27bdc38a6174a16ed597815de4cbbf9a

  • SHA512

    03da611281037f1e550bd841af92cbfaaaf07ed0ba322baa96aa795540fbaed06d217fe36bb6a6bec113bcf6ab4bb2f9b62dea2b538331861e3fa9644aae892a

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJmzB:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3Bd

Score
10/10

Malware Config

Targets

    • Target

      2024-05-29_c4a73623176b8f8f88f7ca41e20635b9_cryptolocker

    • Size

      46KB

    • MD5

      c4a73623176b8f8f88f7ca41e20635b9

    • SHA1

      a9f0fd11d70a69b71b0c10a69a4073020af3cc70

    • SHA256

      12439bfc474adb3f6d3439f9a157225c27bdc38a6174a16ed597815de4cbbf9a

    • SHA512

      03da611281037f1e550bd841af92cbfaaaf07ed0ba322baa96aa795540fbaed06d217fe36bb6a6bec113bcf6ab4bb2f9b62dea2b538331861e3fa9644aae892a

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsJmzB:V6QFElP6n+gMQMOtEvwDpjyaYaFAh3Bd

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks