Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-17_07a2afc1b755f951bb916cbf261aa0c1_cryptolocker

  • Size

    64KB

  • Sample

    240417-dzxnnacd92

  • MD5

    07a2afc1b755f951bb916cbf261aa0c1

  • SHA1

    ef21a2adf8475d1994d8856932fdfd7e6252c1c7

  • SHA256

    09ccbb731ce6a838db827e2f8a2e51962060e9ce077d966c9b3685bc18deea86

  • SHA512

    8cb6ec3ac3e0936ce0d0f46e3a7c27264de42b791898cdcf4a9e1bba654d6d3ea4aec64839569549aa0b67c4dae95424031f66106cdc5b05c569444a7db849f2

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScG7:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_07a2afc1b755f951bb916cbf261aa0c1_cryptolocker

    • Size

      64KB

    • MD5

      07a2afc1b755f951bb916cbf261aa0c1

    • SHA1

      ef21a2adf8475d1994d8856932fdfd7e6252c1c7

    • SHA256

      09ccbb731ce6a838db827e2f8a2e51962060e9ce077d966c9b3685bc18deea86

    • SHA512

      8cb6ec3ac3e0936ce0d0f46e3a7c27264de42b791898cdcf4a9e1bba654d6d3ea4aec64839569549aa0b67c4dae95424031f66106cdc5b05c569444a7db849f2

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScG7:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks