Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_59d64db286da40c1ce13f203f5b1aa65_cryptolocker

  • Size

    47KB

  • Sample

    240430-c6v8qsac48

  • MD5

    59d64db286da40c1ce13f203f5b1aa65

  • SHA1

    f1428bb7c2f247357debb5a4c2929f673103ee39

  • SHA256

    156eb933b0bfd53b673234b9ef1a5414422301922d82d35b748bae7a05e63834

  • SHA512

    ae8ba2dc0a125183571a3a6c170160e503b6d970f67c40d122af89c721f54dee1e4740013f1caf14faffd1433c4fefe5dc1a84929ed6110036f96b1a397d7624

  • SSDEEP

    768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcq:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfq

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_59d64db286da40c1ce13f203f5b1aa65_cryptolocker

    • Size

      47KB

    • MD5

      59d64db286da40c1ce13f203f5b1aa65

    • SHA1

      f1428bb7c2f247357debb5a4c2929f673103ee39

    • SHA256

      156eb933b0bfd53b673234b9ef1a5414422301922d82d35b748bae7a05e63834

    • SHA512

      ae8ba2dc0a125183571a3a6c170160e503b6d970f67c40d122af89c721f54dee1e4740013f1caf14faffd1433c4fefe5dc1a84929ed6110036f96b1a397d7624

    • SSDEEP

      768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/Dpkcq:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfq

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks