Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-07-01_a269b2e6baa1aa2d07c66b55409fa24f_cryptolocker

  • Size

    37KB

  • Sample

    240701-1f1brsvenn

  • MD5

    a269b2e6baa1aa2d07c66b55409fa24f

  • SHA1

    8d6b1dce0263568302b53b826bf7095e408f2467

  • SHA256

    b5278d908a88821d5b6da16e7a2e948f92cfc64a276780b8a33b73ac80b166a6

  • SHA512

    269f8307a5c852881104d69679ec579c456dd6e4ad7fcef88399959dd3316a2ed11e4ff2e5a0ff15ca4ce20a9860fbd372970576c374885c83c3ca36c949233f

  • SSDEEP

    768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITf:qDdFJy3QMOtEvwDpjjWMl7Tf

Score
10/10
upx

Malware Config

Targets

    • Target

      2024-07-01_a269b2e6baa1aa2d07c66b55409fa24f_cryptolocker

    • Size

      37KB

    • MD5

      a269b2e6baa1aa2d07c66b55409fa24f

    • SHA1

      8d6b1dce0263568302b53b826bf7095e408f2467

    • SHA256

      b5278d908a88821d5b6da16e7a2e948f92cfc64a276780b8a33b73ac80b166a6

    • SHA512

      269f8307a5c852881104d69679ec579c456dd6e4ad7fcef88399959dd3316a2ed11e4ff2e5a0ff15ca4ce20a9860fbd372970576c374885c83c3ca36c949233f

    • SSDEEP

      768:q7PdFecFS5agQtOOtEvwDpjeMLZdzuqpXsiE8Wq/DpkITf:qDdFJy3QMOtEvwDpjjWMl7Tf

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks