Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-16_869d44e2e607c166e74801e067756b18_cryptolocker

  • Size

    47KB

  • Sample

    240316-pt9xksdb78

  • MD5

    869d44e2e607c166e74801e067756b18

  • SHA1

    2e1e7a4b6afa3a8089b0c057a12c94e22a38e8dd

  • SHA256

    1f99645a6818bc435e3dc9113b6d8e6a8bccad5d5a32f819669db64c0f77b9c4

  • SHA512

    5d063bbdf298707776ab5b8b543a6b8fced355e8efb90688ff1e2ba3d14278a2986460dea14610612f413e4fe221347999cd536be59d708d19a428b54946cf12

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556Blvj:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvj

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_869d44e2e607c166e74801e067756b18_cryptolocker

    • Size

      47KB

    • MD5

      869d44e2e607c166e74801e067756b18

    • SHA1

      2e1e7a4b6afa3a8089b0c057a12c94e22a38e8dd

    • SHA256

      1f99645a6818bc435e3dc9113b6d8e6a8bccad5d5a32f819669db64c0f77b9c4

    • SHA512

      5d063bbdf298707776ab5b8b543a6b8fced355e8efb90688ff1e2ba3d14278a2986460dea14610612f413e4fe221347999cd536be59d708d19a428b54946cf12

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu556Blvj:X6QFElP6n+gJQMOtEvwDpjB0GIWSlvj

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks