Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-14_4f769a489c0eb7296ce9b2ab11b6d07b_cryptolocker

  • Size

    68KB

  • Sample

    240314-gsbz6aee69

  • MD5

    4f769a489c0eb7296ce9b2ab11b6d07b

  • SHA1

    28c7f52de67e2268ed17fea6c661a1ef828a633c

  • SHA256

    bea2b95e81d05c023ea3ec160d9984d1d26d539abbca0a32177096490c254cd2

  • SHA512

    bb628ddcf7e2c59dc64b47e86ad85b07d8e1d87e21e0fe323d31d658ebc6fe2929088717b30aa767606f6f02e8037f372917863359703587ce043b3249ad80ca

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUj:DW60sllyWOtEvwDpjwF85N

Score
10/10

Malware Config

Targets

    • Target

      2024-03-14_4f769a489c0eb7296ce9b2ab11b6d07b_cryptolocker

    • Size

      68KB

    • MD5

      4f769a489c0eb7296ce9b2ab11b6d07b

    • SHA1

      28c7f52de67e2268ed17fea6c661a1ef828a633c

    • SHA256

      bea2b95e81d05c023ea3ec160d9984d1d26d539abbca0a32177096490c254cd2

    • SHA512

      bb628ddcf7e2c59dc64b47e86ad85b07d8e1d87e21e0fe323d31d658ebc6fe2929088717b30aa767606f6f02e8037f372917863359703587ce043b3249ad80ca

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUj:DW60sllyWOtEvwDpjwF85N

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks