Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-06-10...er.exe

windows7-x64

9

2024-06-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-10_2c4f2165fa102387d39662375c5e8b2c_cryptolocker

  • Size

    64KB

  • Sample

    240610-he57hsea52

  • MD5

    2c4f2165fa102387d39662375c5e8b2c

  • SHA1

    0a8cc67e699f499cb7e1d5f444850b524cfa5d24

  • SHA256

    254adbf5a6bda4bf9d5b961f8a97b304dd54825a91e7e71657b72d29bed46095

  • SHA512

    0da09c5dd1f8ffd8d122db00f14adf9d3e756e8f90a81bd5e5b855e8910047ed337b2c630d41832f617e50b85a1492677d03781f4b958bc993864cc520d41ede

  • SSDEEP

    1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiD:BbdDmjr+OtEvwDpjM8+

Score
10/10

Malware Config

Targets

    • Target

      2024-06-10_2c4f2165fa102387d39662375c5e8b2c_cryptolocker

    • Size

      64KB

    • MD5

      2c4f2165fa102387d39662375c5e8b2c

    • SHA1

      0a8cc67e699f499cb7e1d5f444850b524cfa5d24

    • SHA256

      254adbf5a6bda4bf9d5b961f8a97b304dd54825a91e7e71657b72d29bed46095

    • SHA512

      0da09c5dd1f8ffd8d122db00f14adf9d3e756e8f90a81bd5e5b855e8910047ed337b2c630d41832f617e50b85a1492677d03781f4b958bc993864cc520d41ede

    • SSDEEP

      1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiD:BbdDmjr+OtEvwDpjM8+

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks