Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-06-17...er.exe

windows7-x64

9

2024-06-17...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-17_e4d4a2c0d14559aadb6ba1977b781d49_cryptolocker

  • Size

    49KB

  • Sample

    240617-czz84szfrh

  • MD5

    e4d4a2c0d14559aadb6ba1977b781d49

  • SHA1

    d6b152aa3f8f259b7c47b96cfa34c2d6c219dfaa

  • SHA256

    b1c9c340c07d9053d8f2d1baa245d017e861c94f123c23857201349090e1c093

  • SHA512

    818c1accdf749f187ef3b9a63a4b8e718dddf023be22b99efb58d804683273e94e037fc2c82c9c0bae3deecf2c2440754379193543a1cc04995bf1f082a4d644

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+w1:bIDOw9a0Dwo3P1ojvUSD4PInyDP

Score
10/10

Malware Config

Targets

    • Target

      2024-06-17_e4d4a2c0d14559aadb6ba1977b781d49_cryptolocker

    • Size

      49KB

    • MD5

      e4d4a2c0d14559aadb6ba1977b781d49

    • SHA1

      d6b152aa3f8f259b7c47b96cfa34c2d6c219dfaa

    • SHA256

      b1c9c340c07d9053d8f2d1baa245d017e861c94f123c23857201349090e1c093

    • SHA512

      818c1accdf749f187ef3b9a63a4b8e718dddf023be22b99efb58d804683273e94e037fc2c82c9c0bae3deecf2c2440754379193543a1cc04995bf1f082a4d644

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+w1:bIDOw9a0Dwo3P1ojvUSD4PInyDP

    Score
    9/10

    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks