Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-20_159af65b7cb870cfcbbd23d845672d12_cryptolocker

  • Size

    103KB

  • Sample

    240220-h75fpadh69

  • MD5

    159af65b7cb870cfcbbd23d845672d12

  • SHA1

    e82cdd372789e7aaaab0faa374779c3870680ecb

  • SHA256

    37bdc0f20c613206a88448f18139da1208a8db6d7ffd1dc46888a58b78dfb34d

  • SHA512

    c0b21c8a01fe09b9ae9515c86e439d480625ab5119f01e06dac085a0e2d8622a762eb3dcc92717065d0a1a7d786dbb8b2d5345f1e0c5cb59a945762676f66a9c

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwqWsviPt3fQ:V6a+pOtEvwDpjtzY

Score
10/10

Malware Config

Targets

    • Target

      2024-02-20_159af65b7cb870cfcbbd23d845672d12_cryptolocker

    • Size

      103KB

    • MD5

      159af65b7cb870cfcbbd23d845672d12

    • SHA1

      e82cdd372789e7aaaab0faa374779c3870680ecb

    • SHA256

      37bdc0f20c613206a88448f18139da1208a8db6d7ffd1dc46888a58b78dfb34d

    • SHA512

      c0b21c8a01fe09b9ae9515c86e439d480625ab5119f01e06dac085a0e2d8622a762eb3dcc92717065d0a1a7d786dbb8b2d5345f1e0c5cb59a945762676f66a9c

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpwqWsviPt3fQ:V6a+pOtEvwDpjtzY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks