Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-14...er.exe

windows7-x64

9

2024-02-14...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-14_61ea03ce685d2033dc9da27a4e814a31_cryptolocker

  • Size

    148KB

  • Sample

    240214-vdnx3agh95

  • MD5

    61ea03ce685d2033dc9da27a4e814a31

  • SHA1

    f056c4ab2fc20ba87e7abf4a3646143b7730724d

  • SHA256

    ebffb5bb1995f56ce26af746fbb8fadd1f52b58ae47197c7901f9c6d02407bb8

  • SHA512

    757061810cf6b98b1d0fd8502f0ffb49d3bcca32bbf74e1ce428a8a41e96c4fecdd17f67e31b3a8df2d1fa4258fbf2be40e725460a66ca19b1d417e86446f595

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GNtL1eZ:z6a+CdOOtEvwDpjczj

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-14_61ea03ce685d2033dc9da27a4e814a31_cryptolocker

    • Size

      148KB

    • MD5

      61ea03ce685d2033dc9da27a4e814a31

    • SHA1

      f056c4ab2fc20ba87e7abf4a3646143b7730724d

    • SHA256

      ebffb5bb1995f56ce26af746fbb8fadd1f52b58ae47197c7901f9c6d02407bb8

    • SHA512

      757061810cf6b98b1d0fd8502f0ffb49d3bcca32bbf74e1ce428a8a41e96c4fecdd17f67e31b3a8df2d1fa4258fbf2be40e725460a66ca19b1d417e86446f595

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GNtL1eZ:z6a+CdOOtEvwDpjczj

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks