Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-29_7dd44975f0673a0ecfb4d4368acd5d29_cryptolocker

  • Size

    80KB

  • Sample

    240129-cx6m4sfhg4

  • MD5

    7dd44975f0673a0ecfb4d4368acd5d29

  • SHA1

    f54b678a897fe10addb8a6d87355b20c5ec07c73

  • SHA256

    e3dadc05d0fdc3a1611fbd32cd40d9b24f0b219cf68b9097c8f3dd1bfa35ce0c

  • SHA512

    9175c531ba0f458bf1b56e6db7201b95da7eb69398981f191d367f5bcf3439cac925478f6ba783a2d9f1e7135b06cfc401b0f44d6e00bb0aa0c9e2d7be5e5632

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMo:TCjsIOtEvwDpj5HE/OUHnSMy

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_7dd44975f0673a0ecfb4d4368acd5d29_cryptolocker

    • Size

      80KB

    • MD5

      7dd44975f0673a0ecfb4d4368acd5d29

    • SHA1

      f54b678a897fe10addb8a6d87355b20c5ec07c73

    • SHA256

      e3dadc05d0fdc3a1611fbd32cd40d9b24f0b219cf68b9097c8f3dd1bfa35ce0c

    • SHA512

      9175c531ba0f458bf1b56e6db7201b95da7eb69398981f191d367f5bcf3439cac925478f6ba783a2d9f1e7135b06cfc401b0f44d6e00bb0aa0c9e2d7be5e5632

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMo:TCjsIOtEvwDpj5HE/OUHnSMy

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks