Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-15_cc1a18fabb960c215d97fc94d8965877_cryptolocker

  • Size

    94KB

  • Sample

    240415-n7eg6adh84

  • MD5

    cc1a18fabb960c215d97fc94d8965877

  • SHA1

    ecfe1ea4540642428b6d1579c92b1910b858c86a

  • SHA256

    d819174d1c295682a4d192fd28759a2f6920fae132ebb07c49f787d7a787d3be

  • SHA512

    4476be96162cfaffbfd56a716b4d110e4f05290f3235af3856e896e77377135eea24b953317c139f061c55617e99006277c518f0b412748d547f769b1a5eea5a

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgo:V6a+pOtEvwDpjtzE

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_cc1a18fabb960c215d97fc94d8965877_cryptolocker

    • Size

      94KB

    • MD5

      cc1a18fabb960c215d97fc94d8965877

    • SHA1

      ecfe1ea4540642428b6d1579c92b1910b858c86a

    • SHA256

      d819174d1c295682a4d192fd28759a2f6920fae132ebb07c49f787d7a787d3be

    • SHA512

      4476be96162cfaffbfd56a716b4d110e4f05290f3235af3856e896e77377135eea24b953317c139f061c55617e99006277c518f0b412748d547f769b1a5eea5a

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgo:V6a+pOtEvwDpjtzE

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks