Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-26_28b0b4f834f539efd3bd3a5f6a088be7_cryptolocker

  • Size

    37KB

  • Sample

    240326-jlkd3adh97

  • MD5

    28b0b4f834f539efd3bd3a5f6a088be7

  • SHA1

    2e9a75203777ac77b13df69eb6306082f9c6c43a

  • SHA256

    211cf57348f1ae9042783290767a8e868f61d6aaa1c563e25d751559a2eaa7fc

  • SHA512

    72b1739a44334698717824e53e076b174b1b179329f51eda40b48054ce63cb2794ea130cb2fad02f679f545b10b6d737b482bb9c886581237612f3f3a7e27574

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCpgv:X6QFElP6n+gJQMOtEvwDpjBmzDUpgv

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_28b0b4f834f539efd3bd3a5f6a088be7_cryptolocker

    • Size

      37KB

    • MD5

      28b0b4f834f539efd3bd3a5f6a088be7

    • SHA1

      2e9a75203777ac77b13df69eb6306082f9c6c43a

    • SHA256

      211cf57348f1ae9042783290767a8e868f61d6aaa1c563e25d751559a2eaa7fc

    • SHA512

      72b1739a44334698717824e53e076b174b1b179329f51eda40b48054ce63cb2794ea130cb2fad02f679f545b10b6d737b482bb9c886581237612f3f3a7e27574

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCpgv:X6QFElP6n+gJQMOtEvwDpjBmzDUpgv

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks