Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-22_47ae4d07031790beabc92efe169e44d9_cryptolocker

  • Size

    68KB

  • Sample

    240222-psnmyshb7w

  • MD5

    47ae4d07031790beabc92efe169e44d9

  • SHA1

    5cba4f7abd6a191884f04bb4dd2af73f106ea921

  • SHA256

    102500b6ea10d58da387ae4f0f3006d0558e667d2015ddaa97b5f02f2143553b

  • SHA512

    6efa1a17cf857a41f6eaaf813ce7cc7de3878a6c41728631712f0c0f529c6c7926d3788b3b33f749e515eebcf4ebde920636e670524983c912bf653c1bbd82a4

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUy:DW60sllyWOtEvwDpjwF854

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_47ae4d07031790beabc92efe169e44d9_cryptolocker

    • Size

      68KB

    • MD5

      47ae4d07031790beabc92efe169e44d9

    • SHA1

      5cba4f7abd6a191884f04bb4dd2af73f106ea921

    • SHA256

      102500b6ea10d58da387ae4f0f3006d0558e667d2015ddaa97b5f02f2143553b

    • SHA512

      6efa1a17cf857a41f6eaaf813ce7cc7de3878a6c41728631712f0c0f529c6c7926d3788b3b33f749e515eebcf4ebde920636e670524983c912bf653c1bbd82a4

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUy:DW60sllyWOtEvwDpjwF854

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks