Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-14_d7a3fde46dcaaac056c67ab4e2d5e5d3_cryptolocker

  • Size

    126KB

  • Sample

    240214-bctblsdb7z

  • MD5

    d7a3fde46dcaaac056c67ab4e2d5e5d3

  • SHA1

    5ded03477a538b22ca16f02bdce69d3cec948596

  • SHA256

    508469f03086f5bd339fd8399b34aa866a13acdb18d911fff7e0c24ba44c7d96

  • SHA512

    5e2dea93ebc984430b32cbf3e9088d0c324013c6524d9a28c220d6d3d4efdf3206456d85f6b2cf0c139d0392a284a3be9fc2b11e388088d3d9fca7c200e393b0

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpi:vCA9OtEvwDpjG

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_d7a3fde46dcaaac056c67ab4e2d5e5d3_cryptolocker

    • Size

      126KB

    • MD5

      d7a3fde46dcaaac056c67ab4e2d5e5d3

    • SHA1

      5ded03477a538b22ca16f02bdce69d3cec948596

    • SHA256

      508469f03086f5bd339fd8399b34aa866a13acdb18d911fff7e0c24ba44c7d96

    • SHA512

      5e2dea93ebc984430b32cbf3e9088d0c324013c6524d9a28c220d6d3d4efdf3206456d85f6b2cf0c139d0392a284a3be9fc2b11e388088d3d9fca7c200e393b0

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpi:vCA9OtEvwDpjG

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks