Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_6d82ae3af24a48b037c000d0c863f4fa_cryptolocker

  • Size

    40KB

  • Sample

    240430-haqahaee62

  • MD5

    6d82ae3af24a48b037c000d0c863f4fa

  • SHA1

    437bdbc33e85bcba491613ea63eebcddcda10905

  • SHA256

    48957683514457bc14b440d8df1c23a9d945c2115e60715db0c1091807e0bd95

  • SHA512

    f8b25116b4652f056b933f912b36c3eb1c2fe212bf2be0299f044c7bfa152d32f79dd1de9a90fdfa6bfddf6881e28cabda59850b49107b10a0ca33fd89937eed

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLNWS:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLf

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_6d82ae3af24a48b037c000d0c863f4fa_cryptolocker

    • Size

      40KB

    • MD5

      6d82ae3af24a48b037c000d0c863f4fa

    • SHA1

      437bdbc33e85bcba491613ea63eebcddcda10905

    • SHA256

      48957683514457bc14b440d8df1c23a9d945c2115e60715db0c1091807e0bd95

    • SHA512

      f8b25116b4652f056b933f912b36c3eb1c2fe212bf2be0299f044c7bfa152d32f79dd1de9a90fdfa6bfddf6881e28cabda59850b49107b10a0ca33fd89937eed

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLNWS:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLf

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks