Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-02_7cb0e5c403aad7b9db6efd1703835569_cryptolocker

  • Size

    57KB

  • Sample

    240602-e647rabf99

  • MD5

    7cb0e5c403aad7b9db6efd1703835569

  • SHA1

    69a3000d6c36898f899d64c8677ce600d214da7c

  • SHA256

    e3e10923b4fdffad48da009a0bb0800dbf5510f9cf7c0023b35c8f881ae77513

  • SHA512

    50547956e9393524f45239d2172589f70da11149873002545049f36818a64f4c7c16328ec4ac94873c8d59757a885ba137ab25a848004175c5597198c9b0457f

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlgzz:bP9g/xtCS3Dxx0nz

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-02_7cb0e5c403aad7b9db6efd1703835569_cryptolocker

    • Size

      57KB

    • MD5

      7cb0e5c403aad7b9db6efd1703835569

    • SHA1

      69a3000d6c36898f899d64c8677ce600d214da7c

    • SHA256

      e3e10923b4fdffad48da009a0bb0800dbf5510f9cf7c0023b35c8f881ae77513

    • SHA512

      50547956e9393524f45239d2172589f70da11149873002545049f36818a64f4c7c16328ec4ac94873c8d59757a885ba137ab25a848004175c5597198c9b0457f

    • SSDEEP

      768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlgzz:bP9g/xtCS3Dxx0nz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks