Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-23_d5e732b50ec7990179d597892adaa73a_cryptolocker

  • Size

    83KB

  • Sample

    240223-yt7a5ahb5v

  • MD5

    d5e732b50ec7990179d597892adaa73a

  • SHA1

    cf85d29a36b9d34ecf01fcb2c55812b9c8f293de

  • SHA256

    636a5b4dfa8d48a06b1e33e4de4b552ccbe12d0658777549267416701edc121d

  • SHA512

    aadf4bdbcbc901622a2c8607b276f8cca2241841e19c2bbd5c69da61cdbb40d88fcf207f93e147f61761cef09c7d8d9fa9a9a2de1406b485909a4a75d8e1d15b

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPnJ:V6QFElP6n+gMQMOtEvwDpjyaLccVNlP

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_d5e732b50ec7990179d597892adaa73a_cryptolocker

    • Size

      83KB

    • MD5

      d5e732b50ec7990179d597892adaa73a

    • SHA1

      cf85d29a36b9d34ecf01fcb2c55812b9c8f293de

    • SHA256

      636a5b4dfa8d48a06b1e33e4de4b552ccbe12d0658777549267416701edc121d

    • SHA512

      aadf4bdbcbc901622a2c8607b276f8cca2241841e19c2bbd5c69da61cdbb40d88fcf207f93e147f61761cef09c7d8d9fa9a9a2de1406b485909a4a75d8e1d15b

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLa5VccPtNw5CS95yFPnJ:V6QFElP6n+gMQMOtEvwDpjyaLccVNlP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks