Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
08/06/2024, 16:59
General
-
Target
2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker.exe
-
Size
89KB
-
MD5
3f3309d9e475f74b14dff56ec5ae1e26
-
SHA1
be4e2b8d7b7fb74c416acd5555568e486878ca11
-
SHA256
d5c98ca05ea4dee307ab4c3fe06770b59931b84c47e13e37951094a62c38cdb4
-
SHA512
0a83abd04df97edbadea8593699a20bf55f58d6c345ba5e34a82156eaea8b153b51c9415efef95fb10339014d8dae548d1d2fd1335a150ee9d6ac1177d782c8b
-
SSDEEP
768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIODk:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgG
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 5 IoCs
-
UPX dump on OEP (original entry point) 5 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-08_3f3309d9e475f74b14dff56ec5ae1e26_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
90KB
MD5cacfea27c0f802db0b822534fc4b51a6
SHA15d1ff8f29b380e08fe2e25cca23b54507cc6666f
SHA256dc477aab28e3e8a890f6cc847af4452890586a1539569e9405100f259aaedbde
SHA512185a0bad9d85fede56defc77682ba093fa1b4732e0b785dbdb8e08b381c9b2957f0f85300320ac1fb79ef6e2a11d099e6cfd418c5931c997cfe2d928ec1cc592
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB