Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-05-05...er.exe

windows7-x64

9

2024-05-05...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-05_1b4c83b17c514c124f9fa2d3a1bd15f1_cryptolocker

  • Size

    93KB

  • Sample

    240505-e1wneseh4w

  • MD5

    1b4c83b17c514c124f9fa2d3a1bd15f1

  • SHA1

    d8c0b2ef70acbbb90dc47190be426352f2ad7e95

  • SHA256

    5d928707bfab628841cfff46052d1151121339dc556d2ca1a2c6c89575c2da05

  • SHA512

    f7ff385926681e9db4184b17545f65f6f589a95713eab001f83a99f4b9941c8407ce50e510fc9e508741ff364adc285d6b16331a6e336850f6c628725e3353b7

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/d:zCsanOtEvwDpjBd

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-05-05_1b4c83b17c514c124f9fa2d3a1bd15f1_cryptolocker

    • Size

      93KB

    • MD5

      1b4c83b17c514c124f9fa2d3a1bd15f1

    • SHA1

      d8c0b2ef70acbbb90dc47190be426352f2ad7e95

    • SHA256

      5d928707bfab628841cfff46052d1151121339dc556d2ca1a2c6c89575c2da05

    • SHA512

      f7ff385926681e9db4184b17545f65f6f589a95713eab001f83a99f4b9941c8407ce50e510fc9e508741ff364adc285d6b16331a6e336850f6c628725e3353b7

    • SSDEEP

      1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/d:zCsanOtEvwDpjBd

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks