Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-02_292e4ab6f4de8aa95eef6a39d2ecb73c_cryptolocker

  • Size

    38KB

  • Sample

    240502-2ablwsaa92

  • MD5

    292e4ab6f4de8aa95eef6a39d2ecb73c

  • SHA1

    9fbe76a6c54529840fbe49da99dadce74c303686

  • SHA256

    e2539420cf55564d3261191852b14b42f2b093ece7caf06fb38c77c7c3ff3122

  • SHA512

    64ad111849d0da9d508d11e44143de1c145f68f28e9b97cd3b1bc14d746a264106c1e85c7b24294843d1331f1e2f578bdd56ca22dd343ee895edeef5d2214db9

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYv:qDdFJy3QMOtEvwDpjjWMl7T2

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-02_292e4ab6f4de8aa95eef6a39d2ecb73c_cryptolocker

    • Size

      38KB

    • MD5

      292e4ab6f4de8aa95eef6a39d2ecb73c

    • SHA1

      9fbe76a6c54529840fbe49da99dadce74c303686

    • SHA256

      e2539420cf55564d3261191852b14b42f2b093ece7caf06fb38c77c7c3ff3122

    • SHA512

      64ad111849d0da9d508d11e44143de1c145f68f28e9b97cd3b1bc14d746a264106c1e85c7b24294843d1331f1e2f578bdd56ca22dd343ee895edeef5d2214db9

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITYv:qDdFJy3QMOtEvwDpjjWMl7T2

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks