Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-15_0325c188152f7d2087bed40a0b87ad81_cryptolocker

  • Size

    48KB

  • Sample

    240315-z9e29add49

  • MD5

    0325c188152f7d2087bed40a0b87ad81

  • SHA1

    8c2f6194de430c54053ddec206c0301281abe348

  • SHA256

    048bc20e087e8d7496f5aa624be16c18b7d18a97cb886bc6a536dc2b2c1227fc

  • SHA512

    5a21df44ea62ad352623242aafb87e65a9e6dca8bb10e2553aec2f45b27ff33c31f61dbbd439d3cc5b67a48c35cf1347b13ad27f70b044fccaea5622bd17ec5c

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8x:vj+jsMQMOtEvwDpj5Hczer5ixuMU

Score
10/10

Malware Config

Targets

    • Target

      2024-03-15_0325c188152f7d2087bed40a0b87ad81_cryptolocker

    • Size

      48KB

    • MD5

      0325c188152f7d2087bed40a0b87ad81

    • SHA1

      8c2f6194de430c54053ddec206c0301281abe348

    • SHA256

      048bc20e087e8d7496f5aa624be16c18b7d18a97cb886bc6a536dc2b2c1227fc

    • SHA512

      5a21df44ea62ad352623242aafb87e65a9e6dca8bb10e2553aec2f45b27ff33c31f61dbbd439d3cc5b67a48c35cf1347b13ad27f70b044fccaea5622bd17ec5c

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4/Uth8igNrr46xdUUuuMT8x:vj+jsMQMOtEvwDpj5Hczer5ixuMU

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks