Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-29_63d967c274b12a6a4eb8ec4fb13ddbe7_cryptolocker

  • Size

    126KB

  • Sample

    240229-fkdy4sdh72

  • MD5

    63d967c274b12a6a4eb8ec4fb13ddbe7

  • SHA1

    87f3007392aeaa056fb508e245123bde0772b0b8

  • SHA256

    dbd019d2130295ba7b274640fd58e6385f75566f3c695a4aa680e585b249f895

  • SHA512

    51bcd83703f426065a468e1cec492c89dd7b480bc2ef60fdbbd93da2d001fd2e7ca1687ba507ca1ba4c8c223f83f12d298c8bb9ccbace943c25bd09a03b7152e

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBxL:vCA9OtEvwDpjv

Score
10/10

Malware Config

Targets

    • Target

      2024-02-29_63d967c274b12a6a4eb8ec4fb13ddbe7_cryptolocker

    • Size

      126KB

    • MD5

      63d967c274b12a6a4eb8ec4fb13ddbe7

    • SHA1

      87f3007392aeaa056fb508e245123bde0772b0b8

    • SHA256

      dbd019d2130295ba7b274640fd58e6385f75566f3c695a4aa680e585b249f895

    • SHA512

      51bcd83703f426065a468e1cec492c89dd7b480bc2ef60fdbbd93da2d001fd2e7ca1687ba507ca1ba4c8c223f83f12d298c8bb9ccbace943c25bd09a03b7152e

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBxL:vCA9OtEvwDpjv

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks