Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-28_4ce89af943bca64fbc04f7ab88a86b2a_cryptolocker

  • Size

    52KB

  • Sample

    240228-t55jfsge77

  • MD5

    4ce89af943bca64fbc04f7ab88a86b2a

  • SHA1

    d208895b49fdc264034ad413f9662ec8d0714e9f

  • SHA256

    babd15732989d0f5a9aef703f6ea45837668efe10cf61714e67d951f92c6341d

  • SHA512

    99dcec95a2c7dec5db3057a7d148c8ff6bd2f334e848f2d402a3d333ced4949c2e7259513c43d415340077e85f11dfba6dbf42e06ce370cfde801c2b238d29cd

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFvPw:vj+jsMQMOtEvwDpj5HH1nw73KOFw

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_4ce89af943bca64fbc04f7ab88a86b2a_cryptolocker

    • Size

      52KB

    • MD5

      4ce89af943bca64fbc04f7ab88a86b2a

    • SHA1

      d208895b49fdc264034ad413f9662ec8d0714e9f

    • SHA256

      babd15732989d0f5a9aef703f6ea45837668efe10cf61714e67d951f92c6341d

    • SHA512

      99dcec95a2c7dec5db3057a7d148c8ff6bd2f334e848f2d402a3d333ced4949c2e7259513c43d415340077e85f11dfba6dbf42e06ce370cfde801c2b238d29cd

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4hdCW1nw71TkhsiPn1YFvPw:vj+jsMQMOtEvwDpj5HH1nw73KOFw

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks