Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-03-26...er.exe

windows7-x64

9

2024-03-26...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-26_dfa1e903dee9e210869a60ca70b2eaeb_cryptolocker

  • Size

    61KB

  • Sample

    240326-el8pfafg2s

  • MD5

    dfa1e903dee9e210869a60ca70b2eaeb

  • SHA1

    5e0436c4c91900c7425da5da0e6716387ca7e228

  • SHA256

    4dc404f515009bb71a872b5af70b3216c61a004a8f381eeed9f2f1e858d39a82

  • SHA512

    4d3780d7a2766c122c63e1a8ca5bbe59f5ad32046e721d65a25b1d980ecb5705b009c0817d0d676d58bc9a46201737b29ca7d5d3b5af00fe299a9c3f85a8c6ee

  • SSDEEP

    768:T6LsoEEeegiZPvEhHSG+gkum/kLyMro2GtOOtEvwDpjhXMLamkc8J59l:T6QFElP6n+gxmddpMOtEvwDpjwa39l

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-03-26_dfa1e903dee9e210869a60ca70b2eaeb_cryptolocker

    • Size

      61KB

    • MD5

      dfa1e903dee9e210869a60ca70b2eaeb

    • SHA1

      5e0436c4c91900c7425da5da0e6716387ca7e228

    • SHA256

      4dc404f515009bb71a872b5af70b3216c61a004a8f381eeed9f2f1e858d39a82

    • SHA512

      4d3780d7a2766c122c63e1a8ca5bbe59f5ad32046e721d65a25b1d980ecb5705b009c0817d0d676d58bc9a46201737b29ca7d5d3b5af00fe299a9c3f85a8c6ee

    • SSDEEP

      768:T6LsoEEeegiZPvEhHSG+gkum/kLyMro2GtOOtEvwDpjhXMLamkc8J59l:T6QFElP6n+gxmddpMOtEvwDpjwa39l

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks