Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-29_2ab576b9b03cca762a9b8ccee2b29e9c_cryptolocker

  • Size

    70KB

  • Sample

    240329-c5f3esff3x

  • MD5

    2ab576b9b03cca762a9b8ccee2b29e9c

  • SHA1

    410794f3d7d80ef85ca4843106b8ed1c7cbf37cf

  • SHA256

    9fcbf62a1923bf992fd4e0faba0e81945fa8bfd0ff30b060a10c46be9a69dfe0

  • SHA512

    24c2cd9a40d9d61ff52d5b17f686dad634953c612da40ae0bdc289cbe3d7917e7ac42a60461d099bbcd99ace3a4b0f9700d64125f4a0cb8c375a8d42a1b5a664

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO7:DW60sllyWOtEvwDpjwF85c

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_2ab576b9b03cca762a9b8ccee2b29e9c_cryptolocker

    • Size

      70KB

    • MD5

      2ab576b9b03cca762a9b8ccee2b29e9c

    • SHA1

      410794f3d7d80ef85ca4843106b8ed1c7cbf37cf

    • SHA256

      9fcbf62a1923bf992fd4e0faba0e81945fa8bfd0ff30b060a10c46be9a69dfe0

    • SHA512

      24c2cd9a40d9d61ff52d5b17f686dad634953c612da40ae0bdc289cbe3d7917e7ac42a60461d099bbcd99ace3a4b0f9700d64125f4a0cb8c375a8d42a1b5a664

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO7:DW60sllyWOtEvwDpjwF85c

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks