Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-06-02...er.exe

windows7-x64

9

2024-06-02...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-02_6c546e978cdbb452cc3fe5ce8dc3b33c_cryptolocker

  • Size

    97KB

  • Sample

    240602-cw43wsgc38

  • MD5

    6c546e978cdbb452cc3fe5ce8dc3b33c

  • SHA1

    c081aa8f6503cd93cc0b2ff317d81470d1915ae3

  • SHA256

    7a4afaa26fd575504b2f0507c09aa784801647a5127a5c18d6e239128fce3c37

  • SHA512

    5a4c1a4e25c781246f0ae9f817779efabaf4a87f16e2f0aa7ed36fcc02d50eddb5464f189a82e04f7c8d8d933876e0fd3cc08cba6b944c25baf50fa40331a355

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYT:xj+VGMOtEvwDpjubwQEIiVmksT

Score
10/10

Malware Config

Targets

    • Target

      2024-06-02_6c546e978cdbb452cc3fe5ce8dc3b33c_cryptolocker

    • Size

      97KB

    • MD5

      6c546e978cdbb452cc3fe5ce8dc3b33c

    • SHA1

      c081aa8f6503cd93cc0b2ff317d81470d1915ae3

    • SHA256

      7a4afaa26fd575504b2f0507c09aa784801647a5127a5c18d6e239128fce3c37

    • SHA512

      5a4c1a4e25c781246f0ae9f817779efabaf4a87f16e2f0aa7ed36fcc02d50eddb5464f189a82e04f7c8d8d933876e0fd3cc08cba6b944c25baf50fa40331a355

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYT:xj+VGMOtEvwDpjubwQEIiVmksT

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks