Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-01-25...er.exe

windows7-x64

9

2024-01-25...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-01-25_acf0afc80d4b67758458cb4f5eb7b129_cryptolocker

  • Size

    56KB

  • Sample

    240125-3d5jtahdg5

  • MD5

    acf0afc80d4b67758458cb4f5eb7b129

  • SHA1

    d6beaa1b1981ffff1edc0624b21eafa5dee9647c

  • SHA256

    ec6e866e8cdf21aae1ce836986bbb69779779534ce79475f67ff16cafc589b6a

  • SHA512

    12598e0531237b9f8c60128afecffec01128e287afa01132b7a258d055880ade5f53be8505ff21346a2a35552a482cb6fcc89a97c911f104a3917ad3cf523bd3

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFeV0ZOfcpLzbW:zj+soPSMOtEvwDpj4yzbW

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-01-25_acf0afc80d4b67758458cb4f5eb7b129_cryptolocker

    • Size

      56KB

    • MD5

      acf0afc80d4b67758458cb4f5eb7b129

    • SHA1

      d6beaa1b1981ffff1edc0624b21eafa5dee9647c

    • SHA256

      ec6e866e8cdf21aae1ce836986bbb69779779534ce79475f67ff16cafc589b6a

    • SHA512

      12598e0531237b9f8c60128afecffec01128e287afa01132b7a258d055880ade5f53be8505ff21346a2a35552a482cb6fcc89a97c911f104a3917ad3cf523bd3

    • SSDEEP

      768:zQz7yVEhs9+syJP6ntOOtEvwDpjFeV0ZOfcpLzbW:zj+soPSMOtEvwDpj4yzbW

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks