Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-04_9cc7f22455fcdb1070ad962f2d69485b_cryptolocker

  • Size

    43KB

  • Sample

    240204-ec5anaggh4

  • MD5

    9cc7f22455fcdb1070ad962f2d69485b

  • SHA1

    11a3d92d05778a300fb58b9c52be5025c4695f18

  • SHA256

    095ba3b10026f1089dd2af3002187c5c2c021011c7e305bdb75e80a52c19dad0

  • SHA512

    9661620a5d7d8d6a012752948b7015183896c10bd565501678361418f501a2a9c90b6e4e58fb49c8a8a369639708d725d8c082b50efbba8fcbde99d3059bfbde

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+YUS5p:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+c

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_9cc7f22455fcdb1070ad962f2d69485b_cryptolocker

    • Size

      43KB

    • MD5

      9cc7f22455fcdb1070ad962f2d69485b

    • SHA1

      11a3d92d05778a300fb58b9c52be5025c4695f18

    • SHA256

      095ba3b10026f1089dd2af3002187c5c2c021011c7e305bdb75e80a52c19dad0

    • SHA512

      9661620a5d7d8d6a012752948b7015183896c10bd565501678361418f501a2a9c90b6e4e58fb49c8a8a369639708d725d8c082b50efbba8fcbde99d3059bfbde

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+YUS5p:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+c

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks