Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-13_5085ada1b0f46d6b4e692b4c937bf4dc_cryptolocker

  • Size

    93KB

  • Sample

    240213-1by8xahd9v

  • MD5

    5085ada1b0f46d6b4e692b4c937bf4dc

  • SHA1

    fb9f25e905385ba553deb2bbfd28a3c4769457eb

  • SHA256

    0da077d071fe7cd61a854d39f27a1f798094e462ce8b21497daa8aec4a83fe2a

  • SHA512

    fe98c79f9e8897c7e13f02aa77c7a3e758f2f54711741065fdf79e97e09dbdd68b94a39dc37bb0d4fd883342e61c045c6786034c1bd4f14b61ac3f89ba456d0b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyj:xj+VGMOtEvwDpjubwQEIiVmkuj

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_5085ada1b0f46d6b4e692b4c937bf4dc_cryptolocker

    • Size

      93KB

    • MD5

      5085ada1b0f46d6b4e692b4c937bf4dc

    • SHA1

      fb9f25e905385ba553deb2bbfd28a3c4769457eb

    • SHA256

      0da077d071fe7cd61a854d39f27a1f798094e462ce8b21497daa8aec4a83fe2a

    • SHA512

      fe98c79f9e8897c7e13f02aa77c7a3e758f2f54711741065fdf79e97e09dbdd68b94a39dc37bb0d4fd883342e61c045c6786034c1bd4f14b61ac3f89ba456d0b

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyj:xj+VGMOtEvwDpjubwQEIiVmkuj

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks