Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-24_13aa363aa3b7c2a561c02d8fcde146d0_cryptolocker

  • Size

    47KB

  • Sample

    240224-bt4tnsee61

  • MD5

    13aa363aa3b7c2a561c02d8fcde146d0

  • SHA1

    56611c7c23fc4d1f07903e363ecd5e3d512a6a66

  • SHA256

    b7849f4389d339e30448f6fc6b7732faadadf0726fe376771d1abba2e95f0741

  • SHA512

    9678b13965cf622a522aebceace10e0517b56fa600d88942f8e949587ebf6893d8aec4ab59a78bf3880b24e33753543f7755bc16f209b4c7ad92c69acc92c812

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUujKeMZA:vj+jsMQMOtEvwDpj5Hczer5ixjKeMK

Score
10/10

Malware Config

Targets

    • Target

      2024-02-24_13aa363aa3b7c2a561c02d8fcde146d0_cryptolocker

    • Size

      47KB

    • MD5

      13aa363aa3b7c2a561c02d8fcde146d0

    • SHA1

      56611c7c23fc4d1f07903e363ecd5e3d512a6a66

    • SHA256

      b7849f4389d339e30448f6fc6b7732faadadf0726fe376771d1abba2e95f0741

    • SHA512

      9678b13965cf622a522aebceace10e0517b56fa600d88942f8e949587ebf6893d8aec4ab59a78bf3880b24e33753543f7755bc16f209b4c7ad92c69acc92c812

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUujKeMZA:vj+jsMQMOtEvwDpj5Hczer5ixjKeMK

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks