Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-26_d3f52cead965409f08000e8b36455087_cryptolocker

  • Size

    63KB

  • Sample

    240426-prgg9abg65

  • MD5

    d3f52cead965409f08000e8b36455087

  • SHA1

    ace4aa4b0e8e121dac271e8e5359fa4134caa1d8

  • SHA256

    b93cf3625e9e64f7cc9832687728da6af4e2e70b9f3fcaece9f51d0d9f498852

  • SHA512

    7a0c8746d49a521e12224c40394139309ae068b1a0fba675c82150fb9b65631a4ebcb811c5ee5c27c15869ab08dc47ed341a1be306b4e9aed0b2080817ee84b1

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293X:aq7tdgI2MyzNORQtOflIwoHNV2XBFV71

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_d3f52cead965409f08000e8b36455087_cryptolocker

    • Size

      63KB

    • MD5

      d3f52cead965409f08000e8b36455087

    • SHA1

      ace4aa4b0e8e121dac271e8e5359fa4134caa1d8

    • SHA256

      b93cf3625e9e64f7cc9832687728da6af4e2e70b9f3fcaece9f51d0d9f498852

    • SHA512

      7a0c8746d49a521e12224c40394139309ae068b1a0fba675c82150fb9b65631a4ebcb811c5ee5c27c15869ab08dc47ed341a1be306b4e9aed0b2080817ee84b1

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293X:aq7tdgI2MyzNORQtOflIwoHNV2XBFV71

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks