Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-05_ee92ed8d8620fb2e4dbf32aaebdf1b86_cryptolocker

  • Size

    52KB

  • Sample

    240305-f8pqhsgd56

  • MD5

    ee92ed8d8620fb2e4dbf32aaebdf1b86

  • SHA1

    be0c99a55f261ece69cf3f4bd8392ec551d74990

  • SHA256

    374225d40642940cc0688afd42e04a2053f995c3a129d1157779a7e34cf0f1b0

  • SHA512

    418d42a5e9a1759f78f1dc1b9ed205897ae788e863146b09a3691838bab314242f25654ee44e97bafc8bbc3130687333ff40709681014807bd8b8a9024cb355d

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2LJQ:X6QFElP6n+gJBMOtEvwDpjBtE1yILJQ

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_ee92ed8d8620fb2e4dbf32aaebdf1b86_cryptolocker

    • Size

      52KB

    • MD5

      ee92ed8d8620fb2e4dbf32aaebdf1b86

    • SHA1

      be0c99a55f261ece69cf3f4bd8392ec551d74990

    • SHA256

      374225d40642940cc0688afd42e04a2053f995c3a129d1157779a7e34cf0f1b0

    • SHA512

      418d42a5e9a1759f78f1dc1b9ed205897ae788e863146b09a3691838bab314242f25654ee44e97bafc8bbc3130687333ff40709681014807bd8b8a9024cb355d

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQaV2LJQ:X6QFElP6n+gJBMOtEvwDpjBtE1yILJQ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks