Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_006fe831535a43c2eb50c638136dcba1_cryptolocker

  • Size

    62KB

  • Sample

    240509-19mb1adb27

  • MD5

    006fe831535a43c2eb50c638136dcba1

  • SHA1

    46f709571d1c62fb1a62f9d5befc8c12c7b15d8f

  • SHA256

    ec4f2564ce4c93ae4476c5e546be1c15f3f0e56984d46c67ecd920ed20eae652

  • SHA512

    e0019e9fb787b49ae70df1c78fdc8f4e0f9d2d5d31f71c5170b7dbd76d376bde47f96f47b6d12033c4292b2be5673965fbfe8f345786181c92f5665f504edf6d

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5QR:V6a+pOtEvwDpjvR

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_006fe831535a43c2eb50c638136dcba1_cryptolocker

    • Size

      62KB

    • MD5

      006fe831535a43c2eb50c638136dcba1

    • SHA1

      46f709571d1c62fb1a62f9d5befc8c12c7b15d8f

    • SHA256

      ec4f2564ce4c93ae4476c5e546be1c15f3f0e56984d46c67ecd920ed20eae652

    • SHA512

      e0019e9fb787b49ae70df1c78fdc8f4e0f9d2d5d31f71c5170b7dbd76d376bde47f96f47b6d12033c4292b2be5673965fbfe8f345786181c92f5665f504edf6d

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjyaLccVCbt5QR:V6a+pOtEvwDpjvR

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks