Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-19...er.exe

windows7-x64

9

2024-02-19...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-19_ed31749da19614babd662e6e91eb713f_cryptolocker

  • Size

    114KB

  • Sample

    240219-f177wsaa6w

  • MD5

    ed31749da19614babd662e6e91eb713f

  • SHA1

    b126c3d45c8dd3dca47189246bef6cdae1d82b35

  • SHA256

    35bb92a252f5572800db00e8182e5b2c7e241fb3b8e6233f4d3084ea42ecb117

  • SHA512

    1d6c263bc171f543f0810505e8215b3c4a027bc75a65acedd42818dd7d1dc7e91f2c17f16aec2580a40e8003b3bda0f870740444369f989d1e642c951c8b4297

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01M:z6a+CdOOtEvwDpjcza

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-19_ed31749da19614babd662e6e91eb713f_cryptolocker

    • Size

      114KB

    • MD5

      ed31749da19614babd662e6e91eb713f

    • SHA1

      b126c3d45c8dd3dca47189246bef6cdae1d82b35

    • SHA256

      35bb92a252f5572800db00e8182e5b2c7e241fb3b8e6233f4d3084ea42ecb117

    • SHA512

      1d6c263bc171f543f0810505e8215b3c4a027bc75a65acedd42818dd7d1dc7e91f2c17f16aec2580a40e8003b3bda0f870740444369f989d1e642c951c8b4297

    • SSDEEP

      1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp01M:z6a+CdOOtEvwDpjcza

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks