Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-19_7ae3e382523b3ad24bf1beee00c017dd_cryptolocker

  • Size

    73KB

  • Sample

    240319-nvv95sca2t

  • MD5

    7ae3e382523b3ad24bf1beee00c017dd

  • SHA1

    c741f33b51bca823e872f3ce34298afa2a41d8d9

  • SHA256

    598d16bc42c559e1ba2de74c2799ddc8f23fa4ab9f336e78b90ea77d7e82a866

  • SHA512

    15312fa789e6b0a6acdb1333ed5f6ebf91dfc16411d0fa88ab0b2620aa67519575968b8a22dc9a4f3c1e508d62ec7ed5f1f63ef7466dedaea27f721494432d3b

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1gFY:X6a+SOtEvwDpjBZYvQd2F

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_7ae3e382523b3ad24bf1beee00c017dd_cryptolocker

    • Size

      73KB

    • MD5

      7ae3e382523b3ad24bf1beee00c017dd

    • SHA1

      c741f33b51bca823e872f3ce34298afa2a41d8d9

    • SHA256

      598d16bc42c559e1ba2de74c2799ddc8f23fa4ab9f336e78b90ea77d7e82a866

    • SHA512

      15312fa789e6b0a6acdb1333ed5f6ebf91dfc16411d0fa88ab0b2620aa67519575968b8a22dc9a4f3c1e508d62ec7ed5f1f63ef7466dedaea27f721494432d3b

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1gFY:X6a+SOtEvwDpjBZYvQd2F

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks