Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-05_473d226775fa929f38a4730db2579168_cryptolocker

  • Size

    47KB

  • Sample

    240505-e4ejbafa3v

  • MD5

    473d226775fa929f38a4730db2579168

  • SHA1

    bd5b82c47c27431bca5cc075615301dbca5b43b7

  • SHA256

    d4cdc40b2a05742d47656c00d1fd2262975e0c386dc12be41e05ef68be06441e

  • SHA512

    f7f39b0639c5d84b6630a9222a2e7766b95206ae549b25a59521198318be6c432ce8482a66722aa5b915973b92f7eae81b39e4c54960db6b07ad7f9e0569c782

  • SSDEEP

    768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcD:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfD

Score
10/10

Malware Config

Targets

    • Target

      2024-05-05_473d226775fa929f38a4730db2579168_cryptolocker

    • Size

      47KB

    • MD5

      473d226775fa929f38a4730db2579168

    • SHA1

      bd5b82c47c27431bca5cc075615301dbca5b43b7

    • SHA256

      d4cdc40b2a05742d47656c00d1fd2262975e0c386dc12be41e05ef68be06441e

    • SHA512

      f7f39b0639c5d84b6630a9222a2e7766b95206ae549b25a59521198318be6c432ce8482a66722aa5b915973b92f7eae81b39e4c54960db6b07ad7f9e0569c782

    • SSDEEP

      768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkcD:P6Q0ElP6G+gJQMOtEvwDpjB8WMlfD

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks