Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_51aa7ea715070ca9f1c4409529a89a13_cryptolocker

  • Size

    46KB

  • Sample

    240509-e6t2sadg33

  • MD5

    51aa7ea715070ca9f1c4409529a89a13

  • SHA1

    dc9455783d34acf14b85efb152ec1441dfd389b8

  • SHA256

    a4e45a2b07ff21377a3f5b857cd475da1f63fc65a9bb30e90527bf407baab24e

  • SHA512

    5c6f8a267928d3e1d5214c9b6cfba32e1149d9c4665b987ef85b97e77869be09e3b024bfbdd613def09c4de8989f3c4cb4dbdccef60627dbbefb26093e0a0727

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPaW:P6QFElP6k+MRQMOtEvwDpjBQpVXBW

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_51aa7ea715070ca9f1c4409529a89a13_cryptolocker

    • Size

      46KB

    • MD5

      51aa7ea715070ca9f1c4409529a89a13

    • SHA1

      dc9455783d34acf14b85efb152ec1441dfd389b8

    • SHA256

      a4e45a2b07ff21377a3f5b857cd475da1f63fc65a9bb30e90527bf407baab24e

    • SHA512

      5c6f8a267928d3e1d5214c9b6cfba32e1149d9c4665b987ef85b97e77869be09e3b024bfbdd613def09c4de8989f3c4cb4dbdccef60627dbbefb26093e0a0727

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPaW:P6QFElP6k+MRQMOtEvwDpjBQpVXBW

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks