Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-01_de457d4cfe116818344677ffe51e8ecf_cryptolocker

  • Size

    46KB

  • Sample

    240501-1e4mssba34

  • MD5

    de457d4cfe116818344677ffe51e8ecf

  • SHA1

    a53eb52d5f76a3a6eb2dc3a8ed1cbb9daa19ff4c

  • SHA256

    f9cf47e1b055ac5518cef2f79f5a3c5f763cf951fc19ddd697f24c462d9429a3

  • SHA512

    af3f63734bd5892db88e1c026963a62646b3a63301227ef6c0bf0ddf854f70001e9ea712178f3721d808e4aeb7e2191a4699108388672ab661de62fcceb6f442

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsil:V6QFElP6n+gMQMOtEvwDpjyaYaFAh39l

Score
10/10

Malware Config

Targets

    • Target

      2024-05-01_de457d4cfe116818344677ffe51e8ecf_cryptolocker

    • Size

      46KB

    • MD5

      de457d4cfe116818344677ffe51e8ecf

    • SHA1

      a53eb52d5f76a3a6eb2dc3a8ed1cbb9daa19ff4c

    • SHA256

      f9cf47e1b055ac5518cef2f79f5a3c5f763cf951fc19ddd697f24c462d9429a3

    • SHA512

      af3f63734bd5892db88e1c026963a62646b3a63301227ef6c0bf0ddf854f70001e9ea712178f3721d808e4aeb7e2191a4699108388672ab661de62fcceb6f442

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsil:V6QFElP6n+gMQMOtEvwDpjyaYaFAh39l

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks