Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-06-01...er.exe

windows7-x64

9

2024-06-01...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-01_1c1be903d4c48915601ccfbaa4245fe2_cryptolocker

  • Size

    32KB

  • Sample

    240601-d1833sgc8w

  • MD5

    1c1be903d4c48915601ccfbaa4245fe2

  • SHA1

    a0348c69ddf9b1740b4406dbda283e2441e1847c

  • SHA256

    22077173ee9956883dda5de626a20f37e4619d9fb7044d8fdc8ff7b27a485e64

  • SHA512

    2461bd429b2b4f7e870306077d9b4ff4b486f1e7c6f62e778b7c779a85ee7d4acb7b58c03163b9b56cb6362b3e08747a46b1e9adeb73ad781250d970c8790ac6

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7q:bAvJCYOOvbRPDEgXRcJ2

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_1c1be903d4c48915601ccfbaa4245fe2_cryptolocker

    • Size

      32KB

    • MD5

      1c1be903d4c48915601ccfbaa4245fe2

    • SHA1

      a0348c69ddf9b1740b4406dbda283e2441e1847c

    • SHA256

      22077173ee9956883dda5de626a20f37e4619d9fb7044d8fdc8ff7b27a485e64

    • SHA512

      2461bd429b2b4f7e870306077d9b4ff4b486f1e7c6f62e778b7c779a85ee7d4acb7b58c03163b9b56cb6362b3e08747a46b1e9adeb73ad781250d970c8790ac6

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7q:bAvJCYOOvbRPDEgXRcJ2

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks