Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-26_a968ae702a4f9b694f3002f9b2b8b03c_cryptolocker

  • Size

    127KB

  • Sample

    240426-zk5xdabh48

  • MD5

    a968ae702a4f9b694f3002f9b2b8b03c

  • SHA1

    d0c14c3281c2ec161cc620a34f28ace1457aaa1a

  • SHA256

    c75f4869a645b834b94fb48c7235096cff4ab2048c3f0cf48ce2ff46613983ec

  • SHA512

    882f7b2a5d51d9c7519574d45feae9386a346d80f7ab4156f3be7b469945b67c9f76d5d0244712a0a0e54b2bd3863f9a5ad87ff2dbbfc5adf5e6da5e4c14c821

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//LITN:vCjsIOtEvwDpj5H9YvQd2RE

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_a968ae702a4f9b694f3002f9b2b8b03c_cryptolocker

    • Size

      127KB

    • MD5

      a968ae702a4f9b694f3002f9b2b8b03c

    • SHA1

      d0c14c3281c2ec161cc620a34f28ace1457aaa1a

    • SHA256

      c75f4869a645b834b94fb48c7235096cff4ab2048c3f0cf48ce2ff46613983ec

    • SHA512

      882f7b2a5d51d9c7519574d45feae9386a346d80f7ab4156f3be7b469945b67c9f76d5d0244712a0a0e54b2bd3863f9a5ad87ff2dbbfc5adf5e6da5e4c14c821

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//LITN:vCjsIOtEvwDpj5H9YvQd2RE

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks