Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-23_b7d0586fa0930727a392a6e831aa310e_cryptolocker

  • Size

    50KB

  • Sample

    240423-bb74daae71

  • MD5

    b7d0586fa0930727a392a6e831aa310e

  • SHA1

    1d7db160340d894ba19b6db96f8f04fb0a04f8f7

  • SHA256

    66fa189e305e0c41c1608530ca43ac695a63794a4f5c8b35181896724ef8dc8c

  • SHA512

    b980c077e631fecdc2dfb779b34dbb308209812995515065fd6853452dfee2437bb6ca415b7869032e1faba91d7e3728f913e29cebca98b282238c54c4fafff0

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIm:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_b7d0586fa0930727a392a6e831aa310e_cryptolocker

    • Size

      50KB

    • MD5

      b7d0586fa0930727a392a6e831aa310e

    • SHA1

      1d7db160340d894ba19b6db96f8f04fb0a04f8f7

    • SHA256

      66fa189e305e0c41c1608530ca43ac695a63794a4f5c8b35181896724ef8dc8c

    • SHA512

      b980c077e631fecdc2dfb779b34dbb308209812995515065fd6853452dfee2437bb6ca415b7869032e1faba91d7e3728f913e29cebca98b282238c54c4fafff0

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIm:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7x

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks