Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-02_e169ee57c1ff51548144181344fe44e8_cryptolocker

  • Size

    82KB

  • Sample

    240202-w9d86seggn

  • MD5

    e169ee57c1ff51548144181344fe44e8

  • SHA1

    c6e16b4d3de97a65204fef67571923a186d4bb41

  • SHA256

    2b1181107cf764cf88a3d46525c3c84626ce47b372b3c2048c6ad0e68d728fa7

  • SHA512

    6f3b475dbe2f6124b1cb011a7cabc2783fa829798b9d0335e3e66ddd8fbaff3bd499040bf5d7b3cecd92f314e246828f210defe232ec68513cbbea866ddde383

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFHB:V6QFElP6n+gMQMOtEvwDpjyaLccVNld

Score
10/10

Malware Config

Targets

    • Target

      2024-02-02_e169ee57c1ff51548144181344fe44e8_cryptolocker

    • Size

      82KB

    • MD5

      e169ee57c1ff51548144181344fe44e8

    • SHA1

      c6e16b4d3de97a65204fef67571923a186d4bb41

    • SHA256

      2b1181107cf764cf88a3d46525c3c84626ce47b372b3c2048c6ad0e68d728fa7

    • SHA512

      6f3b475dbe2f6124b1cb011a7cabc2783fa829798b9d0335e3e66ddd8fbaff3bd499040bf5d7b3cecd92f314e246828f210defe232ec68513cbbea866ddde383

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPFHB:V6QFElP6n+gMQMOtEvwDpjyaLccVNld

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks