Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-12_0d396cea7b025724f94b7a172cc20dcf_cryptolocker

  • Size

    120KB

  • Sample

    240312-gdz4fabf85

  • MD5

    0d396cea7b025724f94b7a172cc20dcf

  • SHA1

    668d7e8b78eaafa10c7353369700f6fbbe4b7a9e

  • SHA256

    38cbce561ee98887ef16618a0783e6dc2221a8094e692b8e9be60d3cc3311683

  • SHA512

    aef996e084526a64d5961f1c762390cadde3b13c5098cc3906a7f4afebf8cd3a5b0c42419598c46bc6434fffd9c030f9bbeee0c2c3b28d7510e46157d9ab5b75

  • SSDEEP

    768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTKu:gUj+AIMOtEvwDpjNbwQEIPlemUhYau

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_0d396cea7b025724f94b7a172cc20dcf_cryptolocker

    • Size

      120KB

    • MD5

      0d396cea7b025724f94b7a172cc20dcf

    • SHA1

      668d7e8b78eaafa10c7353369700f6fbbe4b7a9e

    • SHA256

      38cbce561ee98887ef16618a0783e6dc2221a8094e692b8e9be60d3cc3311683

    • SHA512

      aef996e084526a64d5961f1c762390cadde3b13c5098cc3906a7f4afebf8cd3a5b0c42419598c46bc6434fffd9c030f9bbeee0c2c3b28d7510e46157d9ab5b75

    • SSDEEP

      768:gUQz7yVEhs9+4T/1bytOOtEvwDpjNbZ7uyA36S7MpxRIIXVe3mU9TYwlOBTKu:gUj+AIMOtEvwDpjNbwQEIPlemUhYau

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks