Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-10_a17adb185115eabf5cecad040dcbae91_cryptolocker

  • Size

    126KB

  • Sample

    240310-gzslgsdh82

  • MD5

    a17adb185115eabf5cecad040dcbae91

  • SHA1

    bf3324fb3eecdb7528ef5ace5399bf49bb99a078

  • SHA256

    966eaa0ec90a757297f213faf4403db6f50e3a3fd26face1899a08370b0103e3

  • SHA512

    12a9ed82b63f6078a6c6f5c59655cf6a4c36e031ae09603ffdf8e9c48853df6a5ed5b7e23a39800704a415dc7b201a4d04b080a2b693136f76828a4bcd9c6e74

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVY:vCA9OtEvwDpjq

Score
10/10

Malware Config

Targets

    • Target

      2024-03-10_a17adb185115eabf5cecad040dcbae91_cryptolocker

    • Size

      126KB

    • MD5

      a17adb185115eabf5cecad040dcbae91

    • SHA1

      bf3324fb3eecdb7528ef5ace5399bf49bb99a078

    • SHA256

      966eaa0ec90a757297f213faf4403db6f50e3a3fd26face1899a08370b0103e3

    • SHA512

      12a9ed82b63f6078a6c6f5c59655cf6a4c36e031ae09603ffdf8e9c48853df6a5ed5b7e23a39800704a415dc7b201a4d04b080a2b693136f76828a4bcd9c6e74

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVY:vCA9OtEvwDpjq

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks