Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-24_8a58b38d1e045190220723d460ba0ec7_cryptolocker

  • Size

    39KB

  • Sample

    240424-yfv1yagc57

  • MD5

    8a58b38d1e045190220723d460ba0ec7

  • SHA1

    e5ec1eb22ceead84f5d8dbb33184348b4eae8bfd

  • SHA256

    ec5652bc55deca41c6ff947f0ed42ae4028725331844ff86f1c815b6d44d6d9f

  • SHA512

    cbed0de15468e6fc1168e3b046087613cefab79fa995a69d5b27c8506a880626fd981e6592773ba8109196f2669d23db6804a268a6f0f1d23c0e8cdf01218a0a

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axZmGRo:V6QFElP6n+gMQMOtEvwDpjyaYa/mmo

Score
10/10

Malware Config

Targets

    • Target

      2024-04-24_8a58b38d1e045190220723d460ba0ec7_cryptolocker

    • Size

      39KB

    • MD5

      8a58b38d1e045190220723d460ba0ec7

    • SHA1

      e5ec1eb22ceead84f5d8dbb33184348b4eae8bfd

    • SHA256

      ec5652bc55deca41c6ff947f0ed42ae4028725331844ff86f1c815b6d44d6d9f

    • SHA512

      cbed0de15468e6fc1168e3b046087613cefab79fa995a69d5b27c8506a880626fd981e6592773ba8109196f2669d23db6804a268a6f0f1d23c0e8cdf01218a0a

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axZmGRo:V6QFElP6n+gMQMOtEvwDpjyaYa/mmo

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks