Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-31...er.exe

windows7-x64

9

2024-05-31...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-31_c89ad1bb9d003663a901631624233e29_cryptolocker

  • Size

    32KB

  • Sample

    240531-js8egacf79

  • MD5

    c89ad1bb9d003663a901631624233e29

  • SHA1

    a16f6c8477c9fe51658109b0aa55b4eb4dd7d27d

  • SHA256

    3e00ed14d3815e9b5c9ca1f9d28381b144b20322b3eb57d10cb63fab15c0a823

  • SHA512

    ac783b01df5090349ed52a2e2b2181b18e1827131558dbeaefef405b6297c34817396773affc615abad38798dadf32ec57e5892f297602eecba4640eda1f35a5

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7j:bAvJCYOOvbRPDEgXRcJ3

Score
10/10

Malware Config

Targets

    • Target

      2024-05-31_c89ad1bb9d003663a901631624233e29_cryptolocker

    • Size

      32KB

    • MD5

      c89ad1bb9d003663a901631624233e29

    • SHA1

      a16f6c8477c9fe51658109b0aa55b4eb4dd7d27d

    • SHA256

      3e00ed14d3815e9b5c9ca1f9d28381b144b20322b3eb57d10cb63fab15c0a823

    • SHA512

      ac783b01df5090349ed52a2e2b2181b18e1827131558dbeaefef405b6297c34817396773affc615abad38798dadf32ec57e5892f297602eecba4640eda1f35a5

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7j:bAvJCYOOvbRPDEgXRcJ3

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks