Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-02_80817319c379f0ff00298a7c287dd560_cryptolocker

  • Size

    44KB

  • Sample

    240502-ggjkvsce33

  • MD5

    80817319c379f0ff00298a7c287dd560

  • SHA1

    7cadd107d4c73353a28985cf5956a015a22da130

  • SHA256

    4832be9331c641407a7a0c1d391367d52bcda41079a7f029397ee00ca75abecb

  • SHA512

    7f58b7e45c7b745663c41be0cf23c010e63da66c431b579046fc8f04aa959804fde9b365ba43869ab20e82caac8ca61be33176e713dc54db17e4c2b74bbf82c3

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphej6NTG:bc/y2lkF0+BeVi

Score
10/10

Malware Config

Targets

    • Target

      2024-05-02_80817319c379f0ff00298a7c287dd560_cryptolocker

    • Size

      44KB

    • MD5

      80817319c379f0ff00298a7c287dd560

    • SHA1

      7cadd107d4c73353a28985cf5956a015a22da130

    • SHA256

      4832be9331c641407a7a0c1d391367d52bcda41079a7f029397ee00ca75abecb

    • SHA512

      7f58b7e45c7b745663c41be0cf23c010e63da66c431b579046fc8f04aa959804fde9b365ba43869ab20e82caac8ca61be33176e713dc54db17e4c2b74bbf82c3

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphej6NTG:bc/y2lkF0+BeVi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks