Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-10-09_fa2195e1249027a0bfe4cc255aaae981_cryptolocker

  • Size

    67KB

  • Sample

    241009-fmp46azfpj

  • MD5

    fa2195e1249027a0bfe4cc255aaae981

  • SHA1

    d27bc3d3a7c2f579e79bfd9c7ca51b86b254bb90

  • SHA256

    0815ad1c0945f614dbba8ca3525bf97e176568d52eaf7331def7a6c26e94b09b

  • SHA512

    5527673137339adad5311b3439b996a7778e5ed442e6ff6a4a5b9a774a228f8625b510868543a974a1166943cbe56aef950293a652f5f655f5bd28092f76a827

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xDyfl:1nK6a+qdOOtEvwDpjC

Score
7/10

Malware Config

Targets

    • Target

      2024-10-09_fa2195e1249027a0bfe4cc255aaae981_cryptolocker

    • Size

      67KB

    • MD5

      fa2195e1249027a0bfe4cc255aaae981

    • SHA1

      d27bc3d3a7c2f579e79bfd9c7ca51b86b254bb90

    • SHA256

      0815ad1c0945f614dbba8ca3525bf97e176568d52eaf7331def7a6c26e94b09b

    • SHA512

      5527673137339adad5311b3439b996a7778e5ed442e6ff6a4a5b9a774a228f8625b510868543a974a1166943cbe56aef950293a652f5f655f5bd28092f76a827

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xDyfl:1nK6a+qdOOtEvwDpjC

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks