Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-20_edf2751c92fdb5e17a7e05001382dedc_cryptolocker

  • Size

    36KB

  • Sample

    240220-fyv5jscc76

  • MD5

    edf2751c92fdb5e17a7e05001382dedc

  • SHA1

    d2d8c7a59ab0ccb82074af123ba60070c5a0503f

  • SHA256

    558834638d21acf3c1aa70ff869eec4d594162f047e484ceb91fa48682264fdc

  • SHA512

    782df8f2a839dc580a5ac43a5d68a53643f7cac2c5cf4f3ba084feccfc7e822d4c3332b6481567f9b15d9f977a137d758701ae175bbda2c14e3d62cd7eb3fb2b

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKU8:btB9g/WItCSsAGjX7e9N0hunKU8

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_edf2751c92fdb5e17a7e05001382dedc_cryptolocker

    • Size

      36KB

    • MD5

      edf2751c92fdb5e17a7e05001382dedc

    • SHA1

      d2d8c7a59ab0ccb82074af123ba60070c5a0503f

    • SHA256

      558834638d21acf3c1aa70ff869eec4d594162f047e484ceb91fa48682264fdc

    • SHA512

      782df8f2a839dc580a5ac43a5d68a53643f7cac2c5cf4f3ba084feccfc7e822d4c3332b6481567f9b15d9f977a137d758701ae175bbda2c14e3d62cd7eb3fb2b

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKU8:btB9g/WItCSsAGjX7e9N0hunKU8

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks