Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-18_3ec71fa9edb30a5e9d737e364da24826_cryptolocker

  • Size

    44KB

  • Sample

    240218-w6gvwsde9z

  • MD5

    3ec71fa9edb30a5e9d737e364da24826

  • SHA1

    48d5838b338d5c445b654980b74fa9ddd860fa3a

  • SHA256

    dcb4b2788acda77aa54d204477fd0214c1cc2ef6c8af70834bea6cbd0cbc4f72

  • SHA512

    76c67b8c091f5773300d5b832c43408978b5c6a1cf3c62444d4fcea348454e3068a59a247f61201b3d76616b7517addd54a36c29f3554bfcf8495cb141b350a5

  • SSDEEP

    768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxP:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XC

Score
10/10

Malware Config

Targets

    • Target

      2024-02-18_3ec71fa9edb30a5e9d737e364da24826_cryptolocker

    • Size

      44KB

    • MD5

      3ec71fa9edb30a5e9d737e364da24826

    • SHA1

      48d5838b338d5c445b654980b74fa9ddd860fa3a

    • SHA256

      dcb4b2788acda77aa54d204477fd0214c1cc2ef6c8af70834bea6cbd0cbc4f72

    • SHA512

      76c67b8c091f5773300d5b832c43408978b5c6a1cf3c62444d4fcea348454e3068a59a247f61201b3d76616b7517addd54a36c29f3554bfcf8495cb141b350a5

    • SSDEEP

      768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGpebVIYLHA3KxP:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XC

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks