Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-15_4c727c7fc4ff68d8bc1d85b051908c7b_cryptolocker

  • Size

    61KB

  • Sample

    240315-tasamsed92

  • MD5

    4c727c7fc4ff68d8bc1d85b051908c7b

  • SHA1

    3c3ac7861456dcec1d7ec4c7b7aeb87dcc558f63

  • SHA256

    50ddca7195a551ba532e3467f7ac9bfa45d12cd017dd2018b9b237c76d91b5f5

  • SHA512

    c5c9c55ac3ff91d2a9ebb4ee74ce7d8ce1294337bf7a61954cf8f29d96f00ff68e70eb7ef5dafb15d75730f28b8b9c9c0bc3857d678a43999db34a4fdfead3ee

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzoj:X6a+SOtEvwDpjBrOm

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_4c727c7fc4ff68d8bc1d85b051908c7b_cryptolocker

    • Size

      61KB

    • MD5

      4c727c7fc4ff68d8bc1d85b051908c7b

    • SHA1

      3c3ac7861456dcec1d7ec4c7b7aeb87dcc558f63

    • SHA256

      50ddca7195a551ba532e3467f7ac9bfa45d12cd017dd2018b9b237c76d91b5f5

    • SHA512

      c5c9c55ac3ff91d2a9ebb4ee74ce7d8ce1294337bf7a61954cf8f29d96f00ff68e70eb7ef5dafb15d75730f28b8b9c9c0bc3857d678a43999db34a4fdfead3ee

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzoj:X6a+SOtEvwDpjBrOm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks