Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_656a799311e020d5dced52fb6ead31eb_cryptolocker

  • Size

    95KB

  • Sample

    240509-e79hvsdg89

  • MD5

    656a799311e020d5dced52fb6ead31eb

  • SHA1

    fdf38c211ab3c81d807e69dc01c780d907e2fcaf

  • SHA256

    f60298d2a10155573de20f38cea6383a5f351fc22457cd4beca531be100dd497

  • SHA512

    a86b6e30ddf343384b47e68cb46cc502fe2e00dc9ba4ffd013925a11b53a06fa03ceb1ae2c62dd2deb65f226199156749b078c8a69cd596486dc5d4808ff7e05

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgRF:V6a+pOtEvwDpjtzP

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_656a799311e020d5dced52fb6ead31eb_cryptolocker

    • Size

      95KB

    • MD5

      656a799311e020d5dced52fb6ead31eb

    • SHA1

      fdf38c211ab3c81d807e69dc01c780d907e2fcaf

    • SHA256

      f60298d2a10155573de20f38cea6383a5f351fc22457cd4beca531be100dd497

    • SHA512

      a86b6e30ddf343384b47e68cb46cc502fe2e00dc9ba4ffd013925a11b53a06fa03ceb1ae2c62dd2deb65f226199156749b078c8a69cd596486dc5d4808ff7e05

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMgRF:V6a+pOtEvwDpjtzP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks