Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-17_7b88e03276361c117d0fa9ba5733025d_cryptolocker

  • Size

    42KB

  • Sample

    240617-jcxm2avalk

  • MD5

    7b88e03276361c117d0fa9ba5733025d

  • SHA1

    f453e4e9c50f768ea6227d81170344cf922ff808

  • SHA256

    b2c1109d34d7675149669cb97ff953577809a31b9a2e652aad754c31938576a2

  • SHA512

    a2a5d0119fe94a39b67e1d0399f42ec67e5540c6b589926b170159ae9995ded663d55101e44b9acb7b4fca488f1fd2c5b2933e027d9b5d37bb6239474e5d1ea5

  • SSDEEP

    768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKoWv:ba6YcA/Xk3wXFXSqAJb

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-06-17_7b88e03276361c117d0fa9ba5733025d_cryptolocker

    • Size

      42KB

    • MD5

      7b88e03276361c117d0fa9ba5733025d

    • SHA1

      f453e4e9c50f768ea6227d81170344cf922ff808

    • SHA256

      b2c1109d34d7675149669cb97ff953577809a31b9a2e652aad754c31938576a2

    • SHA512

      a2a5d0119fe94a39b67e1d0399f42ec67e5540c6b589926b170159ae9995ded663d55101e44b9acb7b4fca488f1fd2c5b2933e027d9b5d37bb6239474e5d1ea5

    • SSDEEP

      768:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKoWv:ba6YcA/Xk3wXFXSqAJb

    Score
    9/10
    • Detection of CryptoLocker Variants

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks