Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-28_92d588a3a3bb0e2cd5ba5ee83e6a03ef_cryptolocker

  • Size

    48KB

  • Sample

    240128-avny6sfec7

  • MD5

    92d588a3a3bb0e2cd5ba5ee83e6a03ef

  • SHA1

    3f571c5356e0edcbb5fb490889a15425160ee4db

  • SHA256

    8436d2350dc05df18a3003e7f65d5eee3d11d841c108e40397789bbef67da5b2

  • SHA512

    bfe5797bfec24d1bb936c94c8dbba1cb7c27e3531f603ca1c750319541c75b9c254bc39c61e43f8759f0e0ad2c452eee61682d40fd0494355d25acfca8ca4fd0

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGS:79mqyNhQMOtEvwDpjBxe8GGS

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_92d588a3a3bb0e2cd5ba5ee83e6a03ef_cryptolocker

    • Size

      48KB

    • MD5

      92d588a3a3bb0e2cd5ba5ee83e6a03ef

    • SHA1

      3f571c5356e0edcbb5fb490889a15425160ee4db

    • SHA256

      8436d2350dc05df18a3003e7f65d5eee3d11d841c108e40397789bbef67da5b2

    • SHA512

      bfe5797bfec24d1bb936c94c8dbba1cb7c27e3531f603ca1c750319541c75b9c254bc39c61e43f8759f0e0ad2c452eee61682d40fd0494355d25acfca8ca4fd0

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGS:79mqyNhQMOtEvwDpjBxe8GGS

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks