Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-22_eb9c4268b5afa193fb6baad2275c5be4_cryptolocker

  • Size

    40KB

  • Sample

    240422-kgxz2ahe44

  • MD5

    eb9c4268b5afa193fb6baad2275c5be4

  • SHA1

    e38e65a993d4a195a68206524ed9e6081c884321

  • SHA256

    859af5b84c5765827259d66c4b75a467c815703a4545b043e961ca99424f91e0

  • SHA512

    b9400ee5b3e13c2aa7a84b8417dd698216b17bbef3cf1d1f9297e9cd19129a1fa76c2e536835fe4c2abe6ffe75176d00ee52a27143adab6a462efbdef5a3fc0d

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuG:X6QFElP6n+gJQMOtEvwDpjBsYK/f

Score
10/10

Malware Config

Targets

    • Target

      2024-04-22_eb9c4268b5afa193fb6baad2275c5be4_cryptolocker

    • Size

      40KB

    • MD5

      eb9c4268b5afa193fb6baad2275c5be4

    • SHA1

      e38e65a993d4a195a68206524ed9e6081c884321

    • SHA256

      859af5b84c5765827259d66c4b75a467c815703a4545b043e961ca99424f91e0

    • SHA512

      b9400ee5b3e13c2aa7a84b8417dd698216b17bbef3cf1d1f9297e9cd19129a1fa76c2e536835fe4c2abe6ffe75176d00ee52a27143adab6a462efbdef5a3fc0d

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuG:X6QFElP6n+gJQMOtEvwDpjBsYK/f

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks