Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-04_eb8cca154b5bbafff9eb4d1a94fd9442_cryptolocker

  • Size

    51KB

  • Sample

    240204-yfvp6sbdgm

  • MD5

    eb8cca154b5bbafff9eb4d1a94fd9442

  • SHA1

    432e245facf7adcda631d55e6a5992eedb3d19ed

  • SHA256

    b95fdc36e490064f993d433f4cd6dbec53e20b0bff8b952834e363773e3a2ce2

  • SHA512

    d950e1d3efd4a47f45d772edfce44cbf4b1171fa1e8dcb2aaaecc9f417c7279f19574c653ffd77426272f4897c005c63a81d5939ed01ff51f9b93bfabc65d5d3

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRs5xwj:79mqyNhQMOtEvwDpjBxe8TpXRWu

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_eb8cca154b5bbafff9eb4d1a94fd9442_cryptolocker

    • Size

      51KB

    • MD5

      eb8cca154b5bbafff9eb4d1a94fd9442

    • SHA1

      432e245facf7adcda631d55e6a5992eedb3d19ed

    • SHA256

      b95fdc36e490064f993d433f4cd6dbec53e20b0bff8b952834e363773e3a2ce2

    • SHA512

      d950e1d3efd4a47f45d772edfce44cbf4b1171fa1e8dcb2aaaecc9f417c7279f19574c653ffd77426272f4897c005c63a81d5939ed01ff51f9b93bfabc65d5d3

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qn8pKIRs5xwj:79mqyNhQMOtEvwDpjBxe8TpXRWu

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks