Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-29_2c3daeee9d2bfaf1dea1fc21d44f0eb1_cryptolocker

  • Size

    70KB

  • Sample

    240129-e3egxshhb9

  • MD5

    2c3daeee9d2bfaf1dea1fc21d44f0eb1

  • SHA1

    01db695de3a5733de3866dec26dda031235c91c4

  • SHA256

    483ccb7581b25f10774ea71f89cc32c788adcaf21a332cf8ef3b6788467f42e3

  • SHA512

    6299e990646f37b3c28d9e07442092598d1558fbd592752a74619dc9c77dc12ef5a7bb518a55d72c02b18fb9b17ec596de54c63a62af6f8b436a6fae5d12bd6f

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUtbgz:DW60sllyWOtEvwDpjwF85C

Score
10/10

Malware Config

Targets

    • Target

      2024-01-29_2c3daeee9d2bfaf1dea1fc21d44f0eb1_cryptolocker

    • Size

      70KB

    • MD5

      2c3daeee9d2bfaf1dea1fc21d44f0eb1

    • SHA1

      01db695de3a5733de3866dec26dda031235c91c4

    • SHA256

      483ccb7581b25f10774ea71f89cc32c788adcaf21a332cf8ef3b6788467f42e3

    • SHA512

      6299e990646f37b3c28d9e07442092598d1558fbd592752a74619dc9c77dc12ef5a7bb518a55d72c02b18fb9b17ec596de54c63a62af6f8b436a6fae5d12bd6f

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUtbgz:DW60sllyWOtEvwDpjwF85C

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks