Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-10...er.exe

windows7-x64

9

2024-04-10...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-10_7ea681bc28b84c6a527fd91eb065f920_cryptolocker

  • Size

    87KB

  • Sample

    240410-fdam4sgd6w

  • MD5

    7ea681bc28b84c6a527fd91eb065f920

  • SHA1

    b70a6f628999d1a560246d0b1955045a6b3a6fdf

  • SHA256

    fbfbb5173d38301f1edd50680255ebcbbb7572a86ea2a35b01dd8dcab4006fd9

  • SHA512

    374919dd4dc0b8381950d2a03a3ae69c1fa9209bd8fe856e9cb502fe428451b4daf44a6376668516882ed0edd41fddc871daafa6868fb4bdc7030f298a09d731

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7vS:AnBdOOtEvwDpj6zC

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-10_7ea681bc28b84c6a527fd91eb065f920_cryptolocker

    • Size

      87KB

    • MD5

      7ea681bc28b84c6a527fd91eb065f920

    • SHA1

      b70a6f628999d1a560246d0b1955045a6b3a6fdf

    • SHA256

      fbfbb5173d38301f1edd50680255ebcbbb7572a86ea2a35b01dd8dcab4006fd9

    • SHA512

      374919dd4dc0b8381950d2a03a3ae69c1fa9209bd8fe856e9cb502fe428451b4daf44a6376668516882ed0edd41fddc871daafa6868fb4bdc7030f298a09d731

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg7vS:AnBdOOtEvwDpj6zC

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks