Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

5

2024-10-17...er.exe

windows7-x64

7

2024-10-17...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-10-17_8bb1aa2118026671dde5de2c2508e584_cryptolocker

  • Size

    56KB

  • Sample

    241017-x8638ssbpc

  • MD5

    8bb1aa2118026671dde5de2c2508e584

  • SHA1

    e86ce853b42c6210682461bce5bcd1503567b0ef

  • SHA256

    7e3d5dadb1b3f6c9083aba4c2f2a0b015c75caeaa159d33e6e7825ce475cc5c6

  • SHA512

    8df64da3b2664aae9fb856814c1fd62359f1f30bd35ad84d6165a81cb97e2a4a138bcab835cd097eb256ca765eb37fc04ef7fe2867b51f03fb51180cabff4a82

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax848+h7:z6QFElP6n+gKmddpMOtEvwDpj9aYaV

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      2024-10-17_8bb1aa2118026671dde5de2c2508e584_cryptolocker

    • Size

      56KB

    • MD5

      8bb1aa2118026671dde5de2c2508e584

    • SHA1

      e86ce853b42c6210682461bce5bcd1503567b0ef

    • SHA256

      7e3d5dadb1b3f6c9083aba4c2f2a0b015c75caeaa159d33e6e7825ce475cc5c6

    • SHA512

      8df64da3b2664aae9fb856814c1fd62359f1f30bd35ad84d6165a81cb97e2a4a138bcab835cd097eb256ca765eb37fc04ef7fe2867b51f03fb51180cabff4a82

    • SSDEEP

      768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax848+h7:z6QFElP6n+gKmddpMOtEvwDpj9aYaV

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks