Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-18_26bc472484b207ecd5a8f557bce6b4e4_cryptolocker

  • Size

    40KB

  • Sample

    240118-2gj7lsbdgq

  • MD5

    26bc472484b207ecd5a8f557bce6b4e4

  • SHA1

    f4457cdec199c26c2306d95ff3b1be6e2371aca1

  • SHA256

    c5b8447f7d6e4470a1cfc0040d538e96bddf6de051b7fcd72e5dbef31d67929e

  • SHA512

    ab9b9e98724fe71e76aaae1c2bca75bc03f913dafd4f308cd986e807fe1d0772c1a5cc6c164fb77b9429fad7b8a670794ab4bc8a95ea8df02450ac25975b66a0

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqJi:bxNrC7kYo1Fxf3s05rwxbFSi

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_26bc472484b207ecd5a8f557bce6b4e4_cryptolocker

    • Size

      40KB

    • MD5

      26bc472484b207ecd5a8f557bce6b4e4

    • SHA1

      f4457cdec199c26c2306d95ff3b1be6e2371aca1

    • SHA256

      c5b8447f7d6e4470a1cfc0040d538e96bddf6de051b7fcd72e5dbef31d67929e

    • SHA512

      ab9b9e98724fe71e76aaae1c2bca75bc03f913dafd4f308cd986e807fe1d0772c1a5cc6c164fb77b9429fad7b8a670794ab4bc8a95ea8df02450ac25975b66a0

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqJi:bxNrC7kYo1Fxf3s05rwxbFSi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks