Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-28_7cc2a6cc196845b4f477f4aedb0f0d3e_cryptolocker

  • Size

    73KB

  • Sample

    240128-e9xxvabea3

  • MD5

    7cc2a6cc196845b4f477f4aedb0f0d3e

  • SHA1

    a5dee724b28a7b18f23a20bdc218ae3e44b3971a

  • SHA256

    43397bb4076e8a5d28d9abd4002f5fd364d1aedd7891e4083a85d85eacb2565e

  • SHA512

    e0eb932878400d5c8abec671d4b78b847b0d8d7a90c48c84757e8b7529267a05f83a3e08b3ca351622616a11a8fbd6198b6928c187d8515b780a41f97544f230

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KQ:ZVxkGOtEvwDpjcaH

Score
10/10

Malware Config

Targets

    • Target

      2024-01-28_7cc2a6cc196845b4f477f4aedb0f0d3e_cryptolocker

    • Size

      73KB

    • MD5

      7cc2a6cc196845b4f477f4aedb0f0d3e

    • SHA1

      a5dee724b28a7b18f23a20bdc218ae3e44b3971a

    • SHA256

      43397bb4076e8a5d28d9abd4002f5fd364d1aedd7891e4083a85d85eacb2565e

    • SHA512

      e0eb932878400d5c8abec671d4b78b847b0d8d7a90c48c84757e8b7529267a05f83a3e08b3ca351622616a11a8fbd6198b6928c187d8515b780a41f97544f230

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3KQ:ZVxkGOtEvwDpjcaH

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks