Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-15_d7faf9c96da5d811e3ef4690906da600_cryptolocker

  • Size

    40KB

  • Sample

    240415-zt8pmaad6s

  • MD5

    d7faf9c96da5d811e3ef4690906da600

  • SHA1

    69b4ee4998e737b790de10346b9240624705130b

  • SHA256

    bf7e7392e3037d49649e9092a90735553aba39ef1a53009fc443f531db8aec06

  • SHA512

    93cd9889ba90026136e875fbbcfd4d457f53e759cf06c033705fd99b485aa7e36f5e334ab52b594f1c71edd59ddb2981521be038151ca67533b234e1000afd17

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCp4b:X6QFElP6n+gJQMOtEvwDpjBmzDUp4b

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_d7faf9c96da5d811e3ef4690906da600_cryptolocker

    • Size

      40KB

    • MD5

      d7faf9c96da5d811e3ef4690906da600

    • SHA1

      69b4ee4998e737b790de10346b9240624705130b

    • SHA256

      bf7e7392e3037d49649e9092a90735553aba39ef1a53009fc443f531db8aec06

    • SHA512

      93cd9889ba90026136e875fbbcfd4d457f53e759cf06c033705fd99b485aa7e36f5e334ab52b594f1c71edd59ddb2981521be038151ca67533b234e1000afd17

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCp4b:X6QFElP6n+gJQMOtEvwDpjBmzDUp4b

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks