Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-25_2a8b59d4988e95293e1fec049b7a1261_cryptolocker

  • Size

    47KB

  • Sample

    240425-e4cdysfc45

  • MD5

    2a8b59d4988e95293e1fec049b7a1261

  • SHA1

    d41a7d95c5cafda8c7a64e54b3cef08c2f1b6a4a

  • SHA256

    f89fc6b52de61e9fea665abf803ccf986937df52212102def45930889cd9ab55

  • SHA512

    c9c0c9e76dc533d10b2036962cde7ce46b837e479ac2503c0d619aaf937b53192ccc94b82fb12e4854bdeaf095d635aee652a10eec35a87188c6b0dd2f33e17d

  • SSDEEP

    768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkce:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfe

Score
10/10

Malware Config

Targets

    • Target

      2024-04-25_2a8b59d4988e95293e1fec049b7a1261_cryptolocker

    • Size

      47KB

    • MD5

      2a8b59d4988e95293e1fec049b7a1261

    • SHA1

      d41a7d95c5cafda8c7a64e54b3cef08c2f1b6a4a

    • SHA256

      f89fc6b52de61e9fea665abf803ccf986937df52212102def45930889cd9ab55

    • SHA512

      c9c0c9e76dc533d10b2036962cde7ce46b837e479ac2503c0d619aaf937b53192ccc94b82fb12e4854bdeaf095d635aee652a10eec35a87188c6b0dd2f33e17d

    • SSDEEP

      768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkce:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfe

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks