Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-19_673af832df874bc9cf2267d14d68573d_cryptolocker

  • Size

    46KB

  • Sample

    240219-vjvb2ahd73

  • MD5

    673af832df874bc9cf2267d14d68573d

  • SHA1

    b61e30d41277514910c60a73524e62e75e318228

  • SHA256

    d880979e02c30da14b7f111fc0c4df69ed01eb5b6370eec174c6315c77c5b85e

  • SHA512

    525fca80b1042ad215df49585d57a761ea92058562417e959dfe758b5fb86460f21ce8e9e7262909f78a9ab517a90346b9db5a8eb63682c837694a8f27a2b9ca

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1ws0:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ12

Score
10/10

Malware Config

Targets

    • Target

      2024-02-19_673af832df874bc9cf2267d14d68573d_cryptolocker

    • Size

      46KB

    • MD5

      673af832df874bc9cf2267d14d68573d

    • SHA1

      b61e30d41277514910c60a73524e62e75e318228

    • SHA256

      d880979e02c30da14b7f111fc0c4df69ed01eb5b6370eec174c6315c77c5b85e

    • SHA512

      525fca80b1042ad215df49585d57a761ea92058562417e959dfe758b5fb86460f21ce8e9e7262909f78a9ab517a90346b9db5a8eb63682c837694a8f27a2b9ca

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjIm8z2iaSIO/WZrEu/d+qmsUHQ1ws0:ZzFbxmLPWQMOtEvwDpj386Sj/WprqQ12

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks