Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-10_95503f999aff000523554f0714c92188_cryptolocker

  • Size

    126KB

  • Sample

    240310-hcxscseh8z

  • MD5

    95503f999aff000523554f0714c92188

  • SHA1

    0a65a3301782a596466eafdc52032daea6c74238

  • SHA256

    413b46e81a8e4cd9756040f91dfe776c0209e65f2bb50f4b8b965bdb21aa41e1

  • SHA512

    3699c15ef846ee8cf296646f04ed1b8251f2e6554e9b696acd8c32d44ae531059c6450d26a88549f55facffea38b5975ee8096fe0a1a1a4f702b5f7e07a1c1e6

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVB:vCA9OtEvwDpjX

Score
10/10

Malware Config

Targets

    • Target

      2024-03-10_95503f999aff000523554f0714c92188_cryptolocker

    • Size

      126KB

    • MD5

      95503f999aff000523554f0714c92188

    • SHA1

      0a65a3301782a596466eafdc52032daea6c74238

    • SHA256

      413b46e81a8e4cd9756040f91dfe776c0209e65f2bb50f4b8b965bdb21aa41e1

    • SHA512

      3699c15ef846ee8cf296646f04ed1b8251f2e6554e9b696acd8c32d44ae531059c6450d26a88549f55facffea38b5975ee8096fe0a1a1a4f702b5f7e07a1c1e6

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVB:vCA9OtEvwDpjX

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks