Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-28_e53f4409f64e3c26782de5ed9a02a6d0_cryptolocker

  • Size

    49KB

  • Sample

    240328-k1trqaha5y

  • MD5

    e53f4409f64e3c26782de5ed9a02a6d0

  • SHA1

    2f69b014ae6b9c5e5b6e4d81d666a06e3b34fb00

  • SHA256

    7665a1ae50a76f310f05584024ec794ce43d92e3804365411667b71e0ff8098a

  • SHA512

    2779f7b663f294af5250b36b707e561dc9856e6b5318b05b8093c23e1ec59603713a2e55a969838af1e094d86e5db20b9054d91e4ee2af57f433cd700a8e9cb6

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakNQ:V6a+pOtEvwDpjf

Score
10/10

Malware Config

Targets

    • Target

      2024-03-28_e53f4409f64e3c26782de5ed9a02a6d0_cryptolocker

    • Size

      49KB

    • MD5

      e53f4409f64e3c26782de5ed9a02a6d0

    • SHA1

      2f69b014ae6b9c5e5b6e4d81d666a06e3b34fb00

    • SHA256

      7665a1ae50a76f310f05584024ec794ce43d92e3804365411667b71e0ff8098a

    • SHA512

      2779f7b663f294af5250b36b707e561dc9856e6b5318b05b8093c23e1ec59603713a2e55a969838af1e094d86e5db20b9054d91e4ee2af57f433cd700a8e9cb6

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjeJQ7pojakNQ:V6a+pOtEvwDpjf

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks