Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-22_4f664be5c59bf629ba44f468a701b5af_cryptolocker

  • Size

    47KB

  • Sample

    240222-w4jxgadf7x

  • MD5

    4f664be5c59bf629ba44f468a701b5af

  • SHA1

    b49f3f2ca564c789dc841f16552e33f46b0a1fc5

  • SHA256

    e5bb36d728ce6d0cfc6bf79370df8d1f64073bcc6f80f7d5d80742175a0ebc0a

  • SHA512

    0350c37203a20be8fb454993c1fda9e7d3fb16debbe19040db2157c4a752ef7d74ab91680f25a9a67eea9abdc1bfefcfc7d9e5ffd0eeeb358be06d261e3d8597

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT9F:vj+jsMQMOtEvwDpj5Hczer5ixuM7

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_4f664be5c59bf629ba44f468a701b5af_cryptolocker

    • Size

      47KB

    • MD5

      4f664be5c59bf629ba44f468a701b5af

    • SHA1

      b49f3f2ca564c789dc841f16552e33f46b0a1fc5

    • SHA256

      e5bb36d728ce6d0cfc6bf79370df8d1f64073bcc6f80f7d5d80742175a0ebc0a

    • SHA512

      0350c37203a20be8fb454993c1fda9e7d3fb16debbe19040db2157c4a752ef7d74ab91680f25a9a67eea9abdc1bfefcfc7d9e5ffd0eeeb358be06d261e3d8597

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT9F:vj+jsMQMOtEvwDpj5Hczer5ixuM7

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks