Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-21_e26bc1dfc241a9e07246c097bd4b0d01_cryptolocker

  • Size

    50KB

  • Sample

    240421-e89v1sbf7s

  • MD5

    e26bc1dfc241a9e07246c097bd4b0d01

  • SHA1

    aa7c9ca9f0cce164fbcb737c0d02c83571a295bc

  • SHA256

    f8d616a273ee19f61e2f8fbd29d9ecfebdc7f3d48ef17d01d74eb79f6555dd44

  • SHA512

    f7eac205b9507db321d79a2bdac7ff710f19f66131104896e11d9fc870507982ab8d2202f0609ea324176e4fb912eff1e56e5f7483880de34f39d3ddf28e754f

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRHnz9:6j+1NMOtEvwDpjr8hhX9Z

Score
10/10

Malware Config

Targets

    • Target

      2024-04-21_e26bc1dfc241a9e07246c097bd4b0d01_cryptolocker

    • Size

      50KB

    • MD5

      e26bc1dfc241a9e07246c097bd4b0d01

    • SHA1

      aa7c9ca9f0cce164fbcb737c0d02c83571a295bc

    • SHA256

      f8d616a273ee19f61e2f8fbd29d9ecfebdc7f3d48ef17d01d74eb79f6555dd44

    • SHA512

      f7eac205b9507db321d79a2bdac7ff710f19f66131104896e11d9fc870507982ab8d2202f0609ea324176e4fb912eff1e56e5f7483880de34f39d3ddf28e754f

    • SSDEEP

      768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRHnz9:6j+1NMOtEvwDpjr8hhX9Z

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks