Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-19_0aef9ae123a14b4ffea9613e6a5f3c0e_cryptolocker

  • Size

    60KB

  • Sample

    240219-e1nykshe71

  • MD5

    0aef9ae123a14b4ffea9613e6a5f3c0e

  • SHA1

    5429d076a278e1bb6ea832e2017911e20a09f830

  • SHA256

    ea79111406ba792a66df20193615cf5af2181b2fefb8c779554ae78f1f9d847c

  • SHA512

    aa4501cf3fd097588bb41906106e73555dbf9055b8a01cd03c3a4df12a99432f8e15bb5aed563f49b290cc4df2f343a032c5251ec248f5f538d380133edb3090

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMOJ:TCjsIOtEvwDpj5HE/OUHnSMF

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_0aef9ae123a14b4ffea9613e6a5f3c0e_cryptolocker

    • Size

      60KB

    • MD5

      0aef9ae123a14b4ffea9613e6a5f3c0e

    • SHA1

      5429d076a278e1bb6ea832e2017911e20a09f830

    • SHA256

      ea79111406ba792a66df20193615cf5af2181b2fefb8c779554ae78f1f9d847c

    • SHA512

      aa4501cf3fd097588bb41906106e73555dbf9055b8a01cd03c3a4df12a99432f8e15bb5aed563f49b290cc4df2f343a032c5251ec248f5f538d380133edb3090

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMOJ:TCjsIOtEvwDpj5HE/OUHnSMF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks