Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-04-22...er.exe

windows7-x64

9

2024-04-22...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-22_f73d1e5040b268b099812317b7ab99a3_cryptolocker

  • Size

    79KB

  • Sample

    240422-k7ealshh9z

  • MD5

    f73d1e5040b268b099812317b7ab99a3

  • SHA1

    7a4fe71feb606352bf309d73b43a7517b6f1f596

  • SHA256

    2fcb16d44e372e5237d1f1f3f694a1933a1c35051702f665b9bcf087f1c17107

  • SHA512

    16f9304d36d8258ea7b0e1f1cdcbe01574c8af927bc9c9b1e84e288ee83c18bcf18b44144f7031c6509b0c81c93148130a7cdba493a0ac0161e194c98c71217c

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YSafiPuqH:T6a+rdOOtEvwDpjNcc

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-22_f73d1e5040b268b099812317b7ab99a3_cryptolocker

    • Size

      79KB

    • MD5

      f73d1e5040b268b099812317b7ab99a3

    • SHA1

      7a4fe71feb606352bf309d73b43a7517b6f1f596

    • SHA256

      2fcb16d44e372e5237d1f1f3f694a1933a1c35051702f665b9bcf087f1c17107

    • SHA512

      16f9304d36d8258ea7b0e1f1cdcbe01574c8af927bc9c9b1e84e288ee83c18bcf18b44144f7031c6509b0c81c93148130a7cdba493a0ac0161e194c98c71217c

    • SSDEEP

      1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YSafiPuqH:T6a+rdOOtEvwDpjNcc

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks