Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-14_8963cc65d348fe7ef9f4d312ae2c0a00_cryptolocker

  • Size

    71KB

  • Sample

    240214-a3ytcaeb79

  • MD5

    8963cc65d348fe7ef9f4d312ae2c0a00

  • SHA1

    0f0bf5401413d39c06cd5926c9a507adcdcdf12b

  • SHA256

    0bd6eeadb13bcee3b6844e03f7196d2cf378eebb0037c1720dd2c6c82c8ac648

  • SHA512

    40ac2a57a1044039385b9b66a627eae2030ca76cccdf4b2457cdaf42da4d57757bf2f02fac7858130b83465ad859718f9f49b42f80c2c75dcdf81877de8d56c5

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1UWO:X6a+SOtEvwDpjBZYvQd2W

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_8963cc65d348fe7ef9f4d312ae2c0a00_cryptolocker

    • Size

      71KB

    • MD5

      8963cc65d348fe7ef9f4d312ae2c0a00

    • SHA1

      0f0bf5401413d39c06cd5926c9a507adcdcdf12b

    • SHA256

      0bd6eeadb13bcee3b6844e03f7196d2cf378eebb0037c1720dd2c6c82c8ac648

    • SHA512

      40ac2a57a1044039385b9b66a627eae2030ca76cccdf4b2457cdaf42da4d57757bf2f02fac7858130b83465ad859718f9f49b42f80c2c75dcdf81877de8d56c5

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1UWO:X6a+SOtEvwDpjBZYvQd2W

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks