Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-09...er.exe

windows7-x64

9

2024-03-09...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-09_6fbb34d0f0b3c071e8a5373962faa10f_cryptolocker

  • Size

    59KB

  • Sample

    240309-lg71nsee95

  • MD5

    6fbb34d0f0b3c071e8a5373962faa10f

  • SHA1

    5186c9bc68d1e79cc9125628de3ce4ed872c04d4

  • SHA256

    48fe476047a4ac10bc01ce08fa7ace94664bbe22e4b45fe044c42d5721589387

  • SHA512

    8956bc908a96a45d40d46a23f8a054c7945e327b1e05716e8f2de35a59d3cc3ebc2859c016e5304488b67d91a7014faeeef433f825c1bac8d4f41cc801297104

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMO:1nK6a+qdOOtEvwDpj0

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-09_6fbb34d0f0b3c071e8a5373962faa10f_cryptolocker

    • Size

      59KB

    • MD5

      6fbb34d0f0b3c071e8a5373962faa10f

    • SHA1

      5186c9bc68d1e79cc9125628de3ce4ed872c04d4

    • SHA256

      48fe476047a4ac10bc01ce08fa7ace94664bbe22e4b45fe044c42d5721589387

    • SHA512

      8956bc908a96a45d40d46a23f8a054c7945e327b1e05716e8f2de35a59d3cc3ebc2859c016e5304488b67d91a7014faeeef433f825c1bac8d4f41cc801297104

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMO:1nK6a+qdOOtEvwDpj0

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks