Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-22_05d595f9300c1432600be3db3b1aea51_cryptolocker

  • Size

    41KB

  • Sample

    240122-v9zz7sbhf4

  • MD5

    05d595f9300c1432600be3db3b1aea51

  • SHA1

    8a1d81d8b0e54fa7e24e20392acdf3e7aea1e032

  • SHA256

    6e61e069e1eb5c5d9a12aefb3e7f791840e3943746d9b8e4c79703d42cf104bb

  • SHA512

    b5e656779b130bc72aab1bc5f95eb2ac2734c510a124c8a28066f7910f087a5a4dae425952c0989197d3d8af8eb7aae6fb9402a067f4918ec701eae446f52161

  • SSDEEP

    768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx1:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xs

Score
10/10

Malware Config

Targets

    • Target

      2024-01-22_05d595f9300c1432600be3db3b1aea51_cryptolocker

    • Size

      41KB

    • MD5

      05d595f9300c1432600be3db3b1aea51

    • SHA1

      8a1d81d8b0e54fa7e24e20392acdf3e7aea1e032

    • SHA256

      6e61e069e1eb5c5d9a12aefb3e7f791840e3943746d9b8e4c79703d42cf104bb

    • SHA512

      b5e656779b130bc72aab1bc5f95eb2ac2734c510a124c8a28066f7910f087a5a4dae425952c0989197d3d8af8eb7aae6fb9402a067f4918ec701eae446f52161

    • SSDEEP

      768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3Kx1:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xs

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks