Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-14_a5eee7bbabd3cd43dd761e06b99e9cfe_cryptolocker

  • Size

    48KB

  • Sample

    240214-jzrqased56

  • MD5

    a5eee7bbabd3cd43dd761e06b99e9cfe

  • SHA1

    d3b80a1d2420b113357feb30a7c2d20f4f812e2e

  • SHA256

    4820e5d62b12d843bd8718015bf3effb8f45b90c19128f546d99e27639e21d01

  • SHA512

    4f6b7dcd0facf1424f013456c3a02cf781efe10d4a326512894bddf65c17e13ffd9e32b6724ab1afa8105e62bcb002cc0fcaa435b3154a1a121daa38f1a9d943

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakNfW:V6a+pOtEvwDpjt

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_a5eee7bbabd3cd43dd761e06b99e9cfe_cryptolocker

    • Size

      48KB

    • MD5

      a5eee7bbabd3cd43dd761e06b99e9cfe

    • SHA1

      d3b80a1d2420b113357feb30a7c2d20f4f812e2e

    • SHA256

      4820e5d62b12d843bd8718015bf3effb8f45b90c19128f546d99e27639e21d01

    • SHA512

      4f6b7dcd0facf1424f013456c3a02cf781efe10d4a326512894bddf65c17e13ffd9e32b6724ab1afa8105e62bcb002cc0fcaa435b3154a1a121daa38f1a9d943

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakNfW:V6a+pOtEvwDpjt

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks