Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_9130340694c4bbeebe37381f25bd71e9_cryptolocker

  • Size

    93KB

  • Sample

    240430-fxsb9sdc47

  • MD5

    9130340694c4bbeebe37381f25bd71e9

  • SHA1

    086460eda67d4649fd9b51abbf4d72d269bfb6fe

  • SHA256

    b89afc9357b4129aef944863ddfd435d1b3bd413943405e30acea9bbf0a63fb4

  • SHA512

    3bdc0f2ba6268754400496f279041567f56bc755556f1688873a08033bf6b1b7161a42e8f3eb9f431e84b494590bb56915ba337e09a547d6f61ca70b0c7d3b57

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgN6:V6a+pOtEvwDpjtzg

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_9130340694c4bbeebe37381f25bd71e9_cryptolocker

    • Size

      93KB

    • MD5

      9130340694c4bbeebe37381f25bd71e9

    • SHA1

      086460eda67d4649fd9b51abbf4d72d269bfb6fe

    • SHA256

      b89afc9357b4129aef944863ddfd435d1b3bd413943405e30acea9bbf0a63fb4

    • SHA512

      3bdc0f2ba6268754400496f279041567f56bc755556f1688873a08033bf6b1b7161a42e8f3eb9f431e84b494590bb56915ba337e09a547d6f61ca70b0c7d3b57

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgN6:V6a+pOtEvwDpjtzg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks