Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-23_e1188b77d1e81852000b2032a3b5c9b6_cryptolocker

  • Size

    36KB

  • Sample

    240123-jm7wragfak

  • MD5

    e1188b77d1e81852000b2032a3b5c9b6

  • SHA1

    4612bb5640be27f1eb3255102252d3cb402b1a21

  • SHA256

    d81eabd4a25f490b418eef90cfdbae60a288f97980035a6f120e5cd67c1e9b59

  • SHA512

    b83518450b3c9fa4a6fe82b248d9f7cd347cfe954976e2e59eda1ca13f559a0835f69355aa94ee63727692f91fe9d2becc8397073e87a02839d85315e17c4cac

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkCult:YGzl5wjRQBBOsP1QMOtEvwDpjgarrk9

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_e1188b77d1e81852000b2032a3b5c9b6_cryptolocker

    • Size

      36KB

    • MD5

      e1188b77d1e81852000b2032a3b5c9b6

    • SHA1

      4612bb5640be27f1eb3255102252d3cb402b1a21

    • SHA256

      d81eabd4a25f490b418eef90cfdbae60a288f97980035a6f120e5cd67c1e9b59

    • SHA512

      b83518450b3c9fa4a6fe82b248d9f7cd347cfe954976e2e59eda1ca13f559a0835f69355aa94ee63727692f91fe9d2becc8397073e87a02839d85315e17c4cac

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkCult:YGzl5wjRQBBOsP1QMOtEvwDpjgarrk9

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks