Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-19_3fac45f60b9d2efeeab5babf548cb3dd_cryptolocker

  • Size

    65KB

  • Sample

    240319-e5qyqsac9w

  • MD5

    3fac45f60b9d2efeeab5babf548cb3dd

  • SHA1

    6966415e5346c01b2dafa1892363c23061f5a588

  • SHA256

    39938cc3d024b207238b70206212c244a5db9061f88e26cb131902f7b7bc598a

  • SHA512

    281164a5dc504fe529ae1be9f320d56712534c7a2579124e231a6842f3d6021c8c978cd9c7f75a869c037f28924b6decd9dcc126a52e2ad8332bd44d9f491f7f

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/x7:6j+1NMOtEvwDpjr8ox8UDEpN/t

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_3fac45f60b9d2efeeab5babf548cb3dd_cryptolocker

    • Size

      65KB

    • MD5

      3fac45f60b9d2efeeab5babf548cb3dd

    • SHA1

      6966415e5346c01b2dafa1892363c23061f5a588

    • SHA256

      39938cc3d024b207238b70206212c244a5db9061f88e26cb131902f7b7bc598a

    • SHA512

      281164a5dc504fe529ae1be9f320d56712534c7a2579124e231a6842f3d6021c8c978cd9c7f75a869c037f28924b6decd9dcc126a52e2ad8332bd44d9f491f7f

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/x7:6j+1NMOtEvwDpjr8ox8UDEpN/t

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks