Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-22_9fe146130d1fadbbc50dc1e2d91a4601_cryptolocker

  • Size

    40KB

  • Sample

    240222-c4l72sbc34

  • MD5

    9fe146130d1fadbbc50dc1e2d91a4601

  • SHA1

    e03dfe200aa6978c338715448422912b44869dc0

  • SHA256

    b2d6ab297a29a2ad1925aad3b499014699f5049dcbab2295c7744e0ab73e8d3d

  • SHA512

    f7b3ba7cd9dd285d89bc9d70cca5add371111d5668a2add32e3bbf3b20eeace552dc6e7f0da6c8db150363d779df4a633b6000b82f3db66384fc6c344aad22d0

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CyYo7/:6j+1NMOtEvwDpjrRD7/

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_9fe146130d1fadbbc50dc1e2d91a4601_cryptolocker

    • Size

      40KB

    • MD5

      9fe146130d1fadbbc50dc1e2d91a4601

    • SHA1

      e03dfe200aa6978c338715448422912b44869dc0

    • SHA256

      b2d6ab297a29a2ad1925aad3b499014699f5049dcbab2295c7744e0ab73e8d3d

    • SHA512

      f7b3ba7cd9dd285d89bc9d70cca5add371111d5668a2add32e3bbf3b20eeace552dc6e7f0da6c8db150363d779df4a633b6000b82f3db66384fc6c344aad22d0

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CyYo7/:6j+1NMOtEvwDpjrRD7/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks