Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-05_94f39a8244ba7bd972810d56fd4df188_cryptolocker

  • Size

    120KB

  • Sample

    240305-ye2gbsgd74

  • MD5

    94f39a8244ba7bd972810d56fd4df188

  • SHA1

    3f92a8f87525501636060d709a14f694208863bf

  • SHA256

    41c15ecb31738d3611258cd2ac804d9d8f92ab906845f4b409d40771fed6b735

  • SHA512

    8ceb03552c4337e4ca14d7efc17642ed419e5389a867510a5c2baf0a9783559125210b4c2e1da466671ed77f26782e71e5a8e1c5530b239525c5482f2bb45374

  • SSDEEP

    1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgo:u6a++OtEvwDpj6zs

Score
10/10

Malware Config

Targets

    • Target

      2024-03-05_94f39a8244ba7bd972810d56fd4df188_cryptolocker

    • Size

      120KB

    • MD5

      94f39a8244ba7bd972810d56fd4df188

    • SHA1

      3f92a8f87525501636060d709a14f694208863bf

    • SHA256

      41c15ecb31738d3611258cd2ac804d9d8f92ab906845f4b409d40771fed6b735

    • SHA512

      8ceb03552c4337e4ca14d7efc17642ed419e5389a867510a5c2baf0a9783559125210b4c2e1da466671ed77f26782e71e5a8e1c5530b239525c5482f2bb45374

    • SSDEEP

      1536:u6QFElP6n+gWMOtEvwDpjJGYQbN/PKwMgo:u6a++OtEvwDpj6zs

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks