Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-02_65922c9105900181e3b3dbab58b63fea_cryptolocker

  • Size

    74KB

  • Sample

    240502-gcx8fscc94

  • MD5

    65922c9105900181e3b3dbab58b63fea

  • SHA1

    b0c1af85f1fef1e86480d0b31167d8a4be5a67fb

  • SHA256

    9ec175db2cd9bcc401b34ba67fbb18d6698d19fcc662e434b680f830953271ef

  • SHA512

    42bd84c8472014fa5013a8429b567e39bf0ac7df29ee613048b12a30f48286f29d6d7fd5461969b4754fb1ddd8a9faa3bc96c477c5018384e33d7e82634389db

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHs8:X6a+SOtEvwDpjBZYvQd27

Score
10/10

Malware Config

Targets

    • Target

      2024-05-02_65922c9105900181e3b3dbab58b63fea_cryptolocker

    • Size

      74KB

    • MD5

      65922c9105900181e3b3dbab58b63fea

    • SHA1

      b0c1af85f1fef1e86480d0b31167d8a4be5a67fb

    • SHA256

      9ec175db2cd9bcc401b34ba67fbb18d6698d19fcc662e434b680f830953271ef

    • SHA512

      42bd84c8472014fa5013a8429b567e39bf0ac7df29ee613048b12a30f48286f29d6d7fd5461969b4754fb1ddd8a9faa3bc96c477c5018384e33d7e82634389db

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHs8:X6a+SOtEvwDpjBZYvQd27

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks