Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-04_9458b3a9411dad679107afc90cec42f6_cryptolocker

  • Size

    79KB

  • Sample

    240204-ecbncabbcm

  • MD5

    9458b3a9411dad679107afc90cec42f6

  • SHA1

    f87da8df2cd0c60e79a56d190109fad4597f8aa9

  • SHA256

    7b5ecfaaf61dab00d18562f5ff92a840ee8fec396fa53995c0ac7a14f7151f20

  • SHA512

    e8ef870e4981c37f7cf93c615c1391b66824d478d03d1f520772d4a69b203a64868bbea1214d90deb379f877f5a5b1f41d890c5c5715feeb8572cff5529db4d4

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMbF:TCjsIOtEvwDpj5HE/OUHnSM/

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_9458b3a9411dad679107afc90cec42f6_cryptolocker

    • Size

      79KB

    • MD5

      9458b3a9411dad679107afc90cec42f6

    • SHA1

      f87da8df2cd0c60e79a56d190109fad4597f8aa9

    • SHA256

      7b5ecfaaf61dab00d18562f5ff92a840ee8fec396fa53995c0ac7a14f7151f20

    • SHA512

      e8ef870e4981c37f7cf93c615c1391b66824d478d03d1f520772d4a69b203a64868bbea1214d90deb379f877f5a5b1f41d890c5c5715feeb8572cff5529db4d4

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMbF:TCjsIOtEvwDpj5HE/OUHnSM/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks