Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2024-06-12...er.exe

windows7-x64

9

2024-06-12...er.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-12_af48c2f4cb7b12d35c45342023151cbe_cryptolocker

  • Size

    92KB

  • Sample

    240612-yhassaxfme

  • MD5

    af48c2f4cb7b12d35c45342023151cbe

  • SHA1

    d7c5790edcda0d87e8e5f4f82a7a2d8d83661964

  • SHA256

    99e5d97835a7f9fc7ea739c4fec811fe18a2f792a2fd9b356bd7533454bd3b8c

  • SHA512

    4855fe12b4baae3418f4d1f2588d6dd20de6b136ce3ae8b45984e3f80777bdce3f5614f030b87ed6d9e9ddf7c8a055d7ce0c2e1fdabc783093e3ef86d0ed1b42

  • SSDEEP

    1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd2I:AnBdOOtEvwDpj6zn

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-12_af48c2f4cb7b12d35c45342023151cbe_cryptolocker

    • Size

      92KB

    • MD5

      af48c2f4cb7b12d35c45342023151cbe

    • SHA1

      d7c5790edcda0d87e8e5f4f82a7a2d8d83661964

    • SHA256

      99e5d97835a7f9fc7ea739c4fec811fe18a2f792a2fd9b356bd7533454bd3b8c

    • SHA512

      4855fe12b4baae3418f4d1f2588d6dd20de6b136ce3ae8b45984e3f80777bdce3f5614f030b87ed6d9e9ddf7c8a055d7ce0c2e1fdabc783093e3ef86d0ed1b42

    • SSDEEP

      1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwMgdd2I:AnBdOOtEvwDpj6zn

    Score
    9/10
    upx

    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks