Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-02-29...er.exe

windows7-x64

9

2024-02-29...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-29_eca5a409a32cafed02b31a86dfcfcb28_cryptolocker

  • Size

    108KB

  • Sample

    240229-cc9t2aag5x

  • MD5

    eca5a409a32cafed02b31a86dfcfcb28

  • SHA1

    6efc91b5e76d82c2b23a3541f515e6d4c623077f

  • SHA256

    76079ed8cd2d845810cdbd37d0db94c54fd876ad35d32409449ca281c174712a

  • SHA512

    6d5421c4c9e853b9d649784623e203be5ac3c4cd5edf2f3ad2566600d79d371ee9564d491af3359363074573582de882c38336a1c929e5b62c7a8df97d4951bf

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksgEneo:1nK6a+qdOOtEvwDpjD

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-02-29_eca5a409a32cafed02b31a86dfcfcb28_cryptolocker

    • Size

      108KB

    • MD5

      eca5a409a32cafed02b31a86dfcfcb28

    • SHA1

      6efc91b5e76d82c2b23a3541f515e6d4c623077f

    • SHA256

      76079ed8cd2d845810cdbd37d0db94c54fd876ad35d32409449ca281c174712a

    • SHA512

      6d5421c4c9e853b9d649784623e203be5ac3c4cd5edf2f3ad2566600d79d371ee9564d491af3359363074573582de882c38336a1c929e5b62c7a8df97d4951bf

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksgEneo:1nK6a+qdOOtEvwDpjD

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks