Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-12_21af3b45a2eb950e47b5fe8e754f3fa6_cryptolocker

  • Size

    57KB

  • Sample

    240312-svz1jscc4t

  • MD5

    21af3b45a2eb950e47b5fe8e754f3fa6

  • SHA1

    8a3a7fd0cd95d3a356e7b380b572290a0d9fc25c

  • SHA256

    6873fa16feb3acf11dc38cff5c30471af9cce6c58416a26d7e91130bb388bd89

  • SHA512

    8e9e981b75ca14712e0477c18bfb1d7199399cfb52addbada1d53f5da59dbaa084f8e143af828c10b8795dce4a6ba4ac0969216e0722640cf533598a8d286626

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Gowfj8ui:xj+VGMOtEvwDpjubEgdi

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_21af3b45a2eb950e47b5fe8e754f3fa6_cryptolocker

    • Size

      57KB

    • MD5

      21af3b45a2eb950e47b5fe8e754f3fa6

    • SHA1

      8a3a7fd0cd95d3a356e7b380b572290a0d9fc25c

    • SHA256

      6873fa16feb3acf11dc38cff5c30471af9cce6c58416a26d7e91130bb388bd89

    • SHA512

      8e9e981b75ca14712e0477c18bfb1d7199399cfb52addbada1d53f5da59dbaa084f8e143af828c10b8795dce4a6ba4ac0969216e0722640cf533598a8d286626

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7Gowfj8ui:xj+VGMOtEvwDpjubEgdi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks