Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-12_ea0e1999466a00da2216a380c360c51a_cryptolocker

  • Size

    58KB

  • Sample

    240212-lvmlwsac3x

  • MD5

    ea0e1999466a00da2216a380c360c51a

  • SHA1

    aa5b3c3bb45646b2c50c8c7ac42b2a6012b76e9b

  • SHA256

    f1634a2ef6694bab4b76a02fef5c3e3c224419240cdf0314b4388c395304c8f6

  • SHA512

    ee805368e9ec07a55e5683f26b7a503cc4a3f31db06ed80e482b7ed0690a64b7199204efd7816ceddd716cb76225f8588334182a723b81d97d9d4de37cb59d94

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt7gY:V6a+pOtEvwDpjvA

Score
10/10

Malware Config

Targets

    • Target

      2024-02-12_ea0e1999466a00da2216a380c360c51a_cryptolocker

    • Size

      58KB

    • MD5

      ea0e1999466a00da2216a380c360c51a

    • SHA1

      aa5b3c3bb45646b2c50c8c7ac42b2a6012b76e9b

    • SHA256

      f1634a2ef6694bab4b76a02fef5c3e3c224419240cdf0314b4388c395304c8f6

    • SHA512

      ee805368e9ec07a55e5683f26b7a503cc4a3f31db06ed80e482b7ed0690a64b7199204efd7816ceddd716cb76225f8588334182a723b81d97d9d4de37cb59d94

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt7gY:V6a+pOtEvwDpjvA

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks