Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-19_01bae834316b61a55bfc55ea15611e99_cryptolocker

  • Size

    40KB

  • Sample

    240319-z8fbmaga45

  • MD5

    01bae834316b61a55bfc55ea15611e99

  • SHA1

    4af1e99574b3cd5465ec443f1fe2679f265d09ac

  • SHA256

    ed07abf6c48e1e4972d7a05a8b91f32f8d23170863f0e1db15016c13211062a1

  • SHA512

    35fbf3374fd620d020e295b3a90320ad4864f707012bee51b29c993f4e91039bee83a7b9f6e6fab17dd1a642a837c0f9609ecc971870d96885cbf99bd84f462f

  • SSDEEP

    768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66q:vj+jsMQMOtEvwDpj5HW5B

Score
10/10

Malware Config

Targets

    • Target

      2024-03-19_01bae834316b61a55bfc55ea15611e99_cryptolocker

    • Size

      40KB

    • MD5

      01bae834316b61a55bfc55ea15611e99

    • SHA1

      4af1e99574b3cd5465ec443f1fe2679f265d09ac

    • SHA256

      ed07abf6c48e1e4972d7a05a8b91f32f8d23170863f0e1db15016c13211062a1

    • SHA512

      35fbf3374fd620d020e295b3a90320ad4864f707012bee51b29c993f4e91039bee83a7b9f6e6fab17dd1a642a837c0f9609ecc971870d96885cbf99bd84f462f

    • SSDEEP

      768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4REL+cc66q:vj+jsMQMOtEvwDpj5HW5B

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks