Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_9338866a5abf1bac0f418c7cfbfd138d_cryptolocker

  • Size

    47KB

  • Sample

    240430-1jakhsgc8v

  • MD5

    9338866a5abf1bac0f418c7cfbfd138d

  • SHA1

    34257fdfbf65cfe0248a94546a26e5f27cce4503

  • SHA256

    6b0e83396edf768563123add65f902a594c6effac9696886159e400f2d0097d0

  • SHA512

    cd8cb45db71d9048eee397906641e8bca818e139f6bcbb9cae1310d04497694c05cdbc9f3e6d0469d67ed5da5b017aee670f8f12851fe0e2249dc9aa1616e4c4

  • SSDEEP

    768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkc+:P6Q0ElP6G+gJQMOtEvwDpjB8WMlf+

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_9338866a5abf1bac0f418c7cfbfd138d_cryptolocker

    • Size

      47KB

    • MD5

      9338866a5abf1bac0f418c7cfbfd138d

    • SHA1

      34257fdfbf65cfe0248a94546a26e5f27cce4503

    • SHA256

      6b0e83396edf768563123add65f902a594c6effac9696886159e400f2d0097d0

    • SHA512

      cd8cb45db71d9048eee397906641e8bca818e139f6bcbb9cae1310d04497694c05cdbc9f3e6d0469d67ed5da5b017aee670f8f12851fe0e2249dc9aa1616e4c4

    • SSDEEP

      768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkc+:P6Q0ElP6G+gJQMOtEvwDpjB8WMlf+

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks