Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_3a85d7b4f3c831d1246a57a853a8e5cf_cryptolocker

  • Size

    75KB

  • Sample

    240509-rw458aee51

  • MD5

    3a85d7b4f3c831d1246a57a853a8e5cf

  • SHA1

    ab255b1e8cc3027e1a34aaba88b08052bf342b35

  • SHA256

    74a688f2c1dab558d14a5b8b2e2b6f2ca68c94ff53fe680966c2b8fdf5d82045

  • SHA512

    453672435bfb9d421cf1e516c5be282224d3522b3a27e06b4e166538f699ada9d5fbd9f5ac93096cece51ee02b6545bc61f8c44000cf8532cdb734cc85fa8353

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkR:X6a+SOtEvwDpjBZYvQd2q

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_3a85d7b4f3c831d1246a57a853a8e5cf_cryptolocker

    • Size

      75KB

    • MD5

      3a85d7b4f3c831d1246a57a853a8e5cf

    • SHA1

      ab255b1e8cc3027e1a34aaba88b08052bf342b35

    • SHA256

      74a688f2c1dab558d14a5b8b2e2b6f2ca68c94ff53fe680966c2b8fdf5d82045

    • SHA512

      453672435bfb9d421cf1e516c5be282224d3522b3a27e06b4e166538f699ada9d5fbd9f5ac93096cece51ee02b6545bc61f8c44000cf8532cdb734cc85fa8353

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkR:X6a+SOtEvwDpjBZYvQd2q

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks