Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-13_e72636bf8a8074f4daca321194d5d82e_cryptolocker

  • Size

    94KB

  • Sample

    240313-kpwryahb51

  • MD5

    e72636bf8a8074f4daca321194d5d82e

  • SHA1

    81ef64571eccc099995efa986747c5f3196518bc

  • SHA256

    5f9cb38a38d5bcad16ba7c8e74146d7d8d54cee8dff84f454999e5f857cd75c7

  • SHA512

    a017a3a95f5e7fe08215e3d6ea58614593f54beea5f6db077bf77cd0d5f4620eb7d70afff6e30d7f6f0e4b37ed7cce505081beb18d3ebabb1a0c039104cb10fd

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpf:V6a+pOtEvwDpjtz0

Score
10/10

Malware Config

Targets

    • Target

      2024-03-13_e72636bf8a8074f4daca321194d5d82e_cryptolocker

    • Size

      94KB

    • MD5

      e72636bf8a8074f4daca321194d5d82e

    • SHA1

      81ef64571eccc099995efa986747c5f3196518bc

    • SHA256

      5f9cb38a38d5bcad16ba7c8e74146d7d8d54cee8dff84f454999e5f857cd75c7

    • SHA512

      a017a3a95f5e7fe08215e3d6ea58614593f54beea5f6db077bf77cd0d5f4620eb7d70afff6e30d7f6f0e4b37ed7cce505081beb18d3ebabb1a0c039104cb10fd

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgpf:V6a+pOtEvwDpjtz0

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks