Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-26_ac7930d5fa6bc78b6923e6548ad4364b_cryptolocker

  • Size

    50KB

  • Sample

    240326-w8zhqaca9s

  • MD5

    ac7930d5fa6bc78b6923e6548ad4364b

  • SHA1

    16fc41a2b535a40b67f2fa295615da35157abe73

  • SHA256

    481a1c0d13c0b6f1edbb6d293310ac88f07211d8f47be9ddcb040f5455507b48

  • SHA512

    4e39c9e909bc0e7a3c928c13b1e4fd1b9ad4c761f0351071ba7aff768c0fb7a94c2c3252efc28805e25db6a06b9e5537fd30db54f607e10829fa8baab0d216d3

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSO5D:bgGYcA/53GAA6y37Q6dI+d5ID

Score
10/10

Malware Config

Targets

    • Target

      2024-03-26_ac7930d5fa6bc78b6923e6548ad4364b_cryptolocker

    • Size

      50KB

    • MD5

      ac7930d5fa6bc78b6923e6548ad4364b

    • SHA1

      16fc41a2b535a40b67f2fa295615da35157abe73

    • SHA256

      481a1c0d13c0b6f1edbb6d293310ac88f07211d8f47be9ddcb040f5455507b48

    • SHA512

      4e39c9e909bc0e7a3c928c13b1e4fd1b9ad4c761f0351071ba7aff768c0fb7a94c2c3252efc28805e25db6a06b9e5537fd30db54f607e10829fa8baab0d216d3

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CSO5D:bgGYcA/53GAA6y37Q6dI+d5ID

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks