Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-24_9973f8c2bcc0768b96f3ba05d2e3adb8_cryptolocker

  • Size

    36KB

  • Sample

    240424-2faxjsah3w

  • MD5

    9973f8c2bcc0768b96f3ba05d2e3adb8

  • SHA1

    4f090606cb5f909c4a71d38e436ebc8aadb6d593

  • SHA256

    3b9193480a544e5b7ff72ba9a0cd92d0781324f422a94212ec9c109d5f9c41b0

  • SHA512

    cde1956c41f052171b766f99dcc8568ef0114d0abe7f7af87e81c91dd52aebd90befe37911622f8490b3b76247e9e462c9ec70dff1deeee6b4de6f2db9417249

  • SSDEEP

    768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/W:fT+hsMQMOtEvwDpjoIHe

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_9973f8c2bcc0768b96f3ba05d2e3adb8_cryptolocker

    • Size

      36KB

    • MD5

      9973f8c2bcc0768b96f3ba05d2e3adb8

    • SHA1

      4f090606cb5f909c4a71d38e436ebc8aadb6d593

    • SHA256

      3b9193480a544e5b7ff72ba9a0cd92d0781324f422a94212ec9c109d5f9c41b0

    • SHA512

      cde1956c41f052171b766f99dcc8568ef0114d0abe7f7af87e81c91dd52aebd90befe37911622f8490b3b76247e9e462c9ec70dff1deeee6b4de6f2db9417249

    • SSDEEP

      768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+4/W:fT+hsMQMOtEvwDpjoIHe

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks