Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-10_9d982b3235682b1b329ededc473d56b8_cryptolocker

  • Size

    63KB

  • Sample

    240310-t1t7xsgd9s

  • MD5

    9d982b3235682b1b329ededc473d56b8

  • SHA1

    87a37c3a3167c8fecca45226f7a7a41b3fa8ce70

  • SHA256

    9cf1e5b77f7e4471accb16077cd4375325b2ab048d7c5f229052327c9851b7de

  • SHA512

    c549275a75354a76f988c19be6975d3a34ff94f4840e64439e1e80dc726070c612964f6519decbcbd617cb749dd60cca8d161ac42ae398f06e75aadcd8cd8b1f

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKIRQ:6j+1NMOtEvwDpjr8ox8UDEKKQ

Score
10/10

Malware Config

Targets

    • Target

      2024-03-10_9d982b3235682b1b329ededc473d56b8_cryptolocker

    • Size

      63KB

    • MD5

      9d982b3235682b1b329ededc473d56b8

    • SHA1

      87a37c3a3167c8fecca45226f7a7a41b3fa8ce70

    • SHA256

      9cf1e5b77f7e4471accb16077cd4375325b2ab048d7c5f229052327c9851b7de

    • SHA512

      c549275a75354a76f988c19be6975d3a34ff94f4840e64439e1e80dc726070c612964f6519decbcbd617cb749dd60cca8d161ac42ae398f06e75aadcd8cd8b1f

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEKIRQ:6j+1NMOtEvwDpjr8ox8UDEKKQ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks