Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-24_f1cc097bdde29d43313b4fc181a9e7e1_cryptolocker

  • Size

    88KB

  • Sample

    240124-cdkxasfgf8

  • MD5

    f1cc097bdde29d43313b4fc181a9e7e1

  • SHA1

    e0b3e7f31da360db78e905d9edad53183eaedeb5

  • SHA256

    48901033fb9f0b3efefc666c62fdecb26850188f73ae856665bf7219f55df1a1

  • SHA512

    01d2c5d369771d903f53eaa99dcb807c8cd4664c5fd92985852fb20d7f1cbb64983e0fbccbc32e7b14fbbf863a3b17cd169c6de046082bd1d5c9896c9f67d9b6

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQN8:vCjsIOtEvwDpj5H8zPs4

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_f1cc097bdde29d43313b4fc181a9e7e1_cryptolocker

    • Size

      88KB

    • MD5

      f1cc097bdde29d43313b4fc181a9e7e1

    • SHA1

      e0b3e7f31da360db78e905d9edad53183eaedeb5

    • SHA256

      48901033fb9f0b3efefc666c62fdecb26850188f73ae856665bf7219f55df1a1

    • SHA512

      01d2c5d369771d903f53eaa99dcb807c8cd4664c5fd92985852fb20d7f1cbb64983e0fbccbc32e7b14fbbf863a3b17cd169c6de046082bd1d5c9896c9f67d9b6

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQN8:vCjsIOtEvwDpj5H8zPs4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks