Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-22_20422797274e6488ec03aeb266029cb2_cryptolocker

  • Size

    51KB

  • Sample

    240422-v3dhmaea7t

  • MD5

    20422797274e6488ec03aeb266029cb2

  • SHA1

    0f94e1e3a68d1f583f624c21eb250d89407f1093

  • SHA256

    fa3ec97c0f8cb40a1e2f96527482df1a1206a8927d7fed20922968648bbe9c03

  • SHA512

    070a632f33c03c81684e6a7df140d64d2b5d0549c57e19fda30ed5c4b3d553574399cabe6a562785b4f6cc83e00f891db3142bbb978bbaf18b36f39e77aa2df3

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTCFWpzgVoI:X6QFElP6n+gJBMOtEvwDpjBtELVd

Score
10/10

Malware Config

Targets

    • Target

      2024-04-22_20422797274e6488ec03aeb266029cb2_cryptolocker

    • Size

      51KB

    • MD5

      20422797274e6488ec03aeb266029cb2

    • SHA1

      0f94e1e3a68d1f583f624c21eb250d89407f1093

    • SHA256

      fa3ec97c0f8cb40a1e2f96527482df1a1206a8927d7fed20922968648bbe9c03

    • SHA512

      070a632f33c03c81684e6a7df140d64d2b5d0549c57e19fda30ed5c4b3d553574399cabe6a562785b4f6cc83e00f891db3142bbb978bbaf18b36f39e77aa2df3

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTCFWpzgVoI:X6QFElP6n+gJBMOtEvwDpjBtELVd

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks