Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-18_3131a22eded390f24e2710bc0235f3ad_cryptolocker

  • Size

    120KB

  • Sample

    240118-2jckjscfa3

  • MD5

    3131a22eded390f24e2710bc0235f3ad

  • SHA1

    5a06fa8de94bde9cd419e7fe4ca4ccce6914ea57

  • SHA256

    bd5a80f9cfe737fbb3eb293f4ba0940c499a7601433ab63299a58902a9dacf51

  • SHA512

    d02f19992ae1f2137e123d8c19a64b324798cce4990ca28f86f9ae21c0244db9230084800fad8149b8349be64d6a42c8ac06a22fe8d27b87e4cd6b573442df9a

  • SSDEEP

    768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTKY:gUj+AIMOtEvwDpjNbwQEIPlemUhYaY

Score
10/10

Malware Config

Targets

    • Target

      2024-01-18_3131a22eded390f24e2710bc0235f3ad_cryptolocker

    • Size

      120KB

    • MD5

      3131a22eded390f24e2710bc0235f3ad

    • SHA1

      5a06fa8de94bde9cd419e7fe4ca4ccce6914ea57

    • SHA256

      bd5a80f9cfe737fbb3eb293f4ba0940c499a7601433ab63299a58902a9dacf51

    • SHA512

      d02f19992ae1f2137e123d8c19a64b324798cce4990ca28f86f9ae21c0244db9230084800fad8149b8349be64d6a42c8ac06a22fe8d27b87e4cd6b573442df9a

    • SSDEEP

      768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTKY:gUj+AIMOtEvwDpjNbwQEIPlemUhYaY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks