Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-04...er.exe

windows7-x64

9

2024-05-04...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-04_cb1e56579fb849c57b9c18c6815d0a57_cryptolocker

  • Size

    55KB

  • Sample

    240504-zb7plsae6w

  • MD5

    cb1e56579fb849c57b9c18c6815d0a57

  • SHA1

    6164491bcea5d7ce86cc378403a41bc58a3f809b

  • SHA256

    6cfa09fa8a608ddd353f808c3c0eeb119b3abed7a9626f0d8c8ff298e65e8833

  • SHA512

    9847570d2c24be6321dcb2d0af6db20d5a71f9385d74e719bd477f6968f80be36687b514c0267c0e99cf33562152c49bd4afd83344897bf9f89f7ee086402439

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+L/:bP9g/xtCS3Dxx0JD

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-04_cb1e56579fb849c57b9c18c6815d0a57_cryptolocker

    • Size

      55KB

    • MD5

      cb1e56579fb849c57b9c18c6815d0a57

    • SHA1

      6164491bcea5d7ce86cc378403a41bc58a3f809b

    • SHA256

      6cfa09fa8a608ddd353f808c3c0eeb119b3abed7a9626f0d8c8ff298e65e8833

    • SHA512

      9847570d2c24be6321dcb2d0af6db20d5a71f9385d74e719bd477f6968f80be36687b514c0267c0e99cf33562152c49bd4afd83344897bf9f89f7ee086402439

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjl+L/:bP9g/xtCS3Dxx0JD

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks