Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-19_89cb6a22c4396bae9d257c4445b66da7_cryptolocker

  • Size

    75KB

  • Sample

    240319-tgh1jsgf3x

  • MD5

    89cb6a22c4396bae9d257c4445b66da7

  • SHA1

    34ea15d1f734eb12d6bf5466440f9f3ebd54c3a4

  • SHA256

    cce89171bc98e1c56d42d46131712a863cc4f5dd4b9becc3e5a1ddaa67d26530

  • SHA512

    bde0dd029d54286aab3a34e60feb81d8f6ca8b7685f8383a54ecb3f20a2bdc500bb201c76b727970a5f9f0a7679899c13dc9c2f7a277b3a4472e339e0c2cc992

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1six:X6a+SOtEvwDpjBZYvQd27

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_89cb6a22c4396bae9d257c4445b66da7_cryptolocker

    • Size

      75KB

    • MD5

      89cb6a22c4396bae9d257c4445b66da7

    • SHA1

      34ea15d1f734eb12d6bf5466440f9f3ebd54c3a4

    • SHA256

      cce89171bc98e1c56d42d46131712a863cc4f5dd4b9becc3e5a1ddaa67d26530

    • SHA512

      bde0dd029d54286aab3a34e60feb81d8f6ca8b7685f8383a54ecb3f20a2bdc500bb201c76b727970a5f9f0a7679899c13dc9c2f7a277b3a4472e339e0c2cc992

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1six:X6a+SOtEvwDpjBZYvQd27

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks