Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-14_b11b02950798ac6c306962238f4beab9_cryptolocker

  • Size

    71KB

  • Sample

    240314-s8w6taac32

  • MD5

    b11b02950798ac6c306962238f4beab9

  • SHA1

    886ce1299b6319c7135344f70b548319d236a2cd

  • SHA256

    28d18eccd29d9580fad15f5742844e1d35b09c3c216970235eda6de9363db00a

  • SHA512

    19dd3dd62aaa54825e8677307ccbbf3d6bf890c9b7e3930da579fc4938c6a3be694a1d601a633006810014c521919eabfbb2b702233531191eb81b3824cb4ea3

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalV5:1nK6a+qdOOtEvwDpju

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-14_b11b02950798ac6c306962238f4beab9_cryptolocker

    • Size

      71KB

    • MD5

      b11b02950798ac6c306962238f4beab9

    • SHA1

      886ce1299b6319c7135344f70b548319d236a2cd

    • SHA256

      28d18eccd29d9580fad15f5742844e1d35b09c3c216970235eda6de9363db00a

    • SHA512

      19dd3dd62aaa54825e8677307ccbbf3d6bf890c9b7e3930da579fc4938c6a3be694a1d601a633006810014c521919eabfbb2b702233531191eb81b3824cb4ea3

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalV5:1nK6a+qdOOtEvwDpju

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks