Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-23_92151981f2416020c35fbbcbe372c7ef_cryptolocker

  • Size

    92KB

  • Sample

    240423-eb5j2acf5z

  • MD5

    92151981f2416020c35fbbcbe372c7ef

  • SHA1

    ce16268645ce5bfa08ed2d62a6093d6791e973a0

  • SHA256

    f2e4c2323eda93772757d875145a380098232563677f8878ba1cf64c68532aad

  • SHA512

    ce4d64ce2667948c30fde533522e03c4ee6f5f464877b0bd000e3fde20a5a31e3f78112bde094404bb6f987f76db2a20224e8c02b7d204f816559f937ef8d489

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQNyrR:vCjsIOtEvwDpj5H8zPsg

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_92151981f2416020c35fbbcbe372c7ef_cryptolocker

    • Size

      92KB

    • MD5

      92151981f2416020c35fbbcbe372c7ef

    • SHA1

      ce16268645ce5bfa08ed2d62a6093d6791e973a0

    • SHA256

      f2e4c2323eda93772757d875145a380098232563677f8878ba1cf64c68532aad

    • SHA512

      ce4d64ce2667948c30fde533522e03c4ee6f5f464877b0bd000e3fde20a5a31e3f78112bde094404bb6f987f76db2a20224e8c02b7d204f816559f937ef8d489

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5H8u8rBN6nqEZNi1OkQNyrR:vCjsIOtEvwDpj5H8zPsg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks