Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-26_32c7b92fe7faee66936391bd1bb9e69b_cryptolocker

  • Size

    46KB

  • Sample

    240126-z8ckqsgagl

  • MD5

    32c7b92fe7faee66936391bd1bb9e69b

  • SHA1

    11c0446ef4b91db2f9cc10597f74423106e94b54

  • SHA256

    4f06a5711862e4774742d3f578c9e0f00a389a7110bcdad69f45e45da0c25051

  • SHA512

    d672bfa461827e763b073513e05089b06a00ecb016505abd4b61b918b0534e32b3b7fade375deff6b48abe0214762e202f2c1bf62eda6a21a598583acce1da61

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hD8:bgGYcA/53GAA6y37nbY

Score
10/10

Malware Config

Targets

    • Target

      2024-01-26_32c7b92fe7faee66936391bd1bb9e69b_cryptolocker

    • Size

      46KB

    • MD5

      32c7b92fe7faee66936391bd1bb9e69b

    • SHA1

      11c0446ef4b91db2f9cc10597f74423106e94b54

    • SHA256

      4f06a5711862e4774742d3f578c9e0f00a389a7110bcdad69f45e45da0c25051

    • SHA512

      d672bfa461827e763b073513e05089b06a00ecb016505abd4b61b918b0534e32b3b7fade375deff6b48abe0214762e202f2c1bf62eda6a21a598583acce1da61

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hD8:bgGYcA/53GAA6y37nbY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks