Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_f9e7f0ce9bd2152f142bf0b2658185e8_cryptolocker

  • Size

    55KB

  • Sample

    240430-s2kjfaca62

  • MD5

    f9e7f0ce9bd2152f142bf0b2658185e8

  • SHA1

    7aadaf1bafd102a290cbae3723db65728e912300

  • SHA256

    cfd66efa89bd3078bffbbbb18f2c0eab605809b6f0e857809f6f2ce492126856

  • SHA512

    84ac6f26e5431cb73509495b1758f8c53f6c0b7a51139c7763e0656a8d42d8828fda2097e27124b06c765112157d633246db05d6f43ba80e35c09dca4d98419e

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjNp:bP9g/xtCS3Dxx02

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-04-30_f9e7f0ce9bd2152f142bf0b2658185e8_cryptolocker

    • Size

      55KB

    • MD5

      f9e7f0ce9bd2152f142bf0b2658185e8

    • SHA1

      7aadaf1bafd102a290cbae3723db65728e912300

    • SHA256

      cfd66efa89bd3078bffbbbb18f2c0eab605809b6f0e857809f6f2ce492126856

    • SHA512

      84ac6f26e5431cb73509495b1758f8c53f6c0b7a51139c7763e0656a8d42d8828fda2097e27124b06c765112157d633246db05d6f43ba80e35c09dca4d98419e

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjNp:bP9g/xtCS3Dxx02

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks