Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-09_3042696e30608a27beae9522dea2a2b6_cryptolocker

  • Size

    68KB

  • Sample

    240509-y6rffacg9w

  • MD5

    3042696e30608a27beae9522dea2a2b6

  • SHA1

    302071c513bf13d71a834c43b42a13720bcc8257

  • SHA256

    ec556b654a240b7b256cb9a8ae785963fd232e18e6c48e896272984eca847d4f

  • SHA512

    75c368ecc0344840272a7fd759f730d18cef3295fa1cb789e979158e272b73aed6a5a8a11c9484980200b4c3c774f597209db700ca6510c123796744a30c6b9f

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEZ:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7h

Score
10/10

Malware Config

Targets

    • Target

      2024-05-09_3042696e30608a27beae9522dea2a2b6_cryptolocker

    • Size

      68KB

    • MD5

      3042696e30608a27beae9522dea2a2b6

    • SHA1

      302071c513bf13d71a834c43b42a13720bcc8257

    • SHA256

      ec556b654a240b7b256cb9a8ae785963fd232e18e6c48e896272984eca847d4f

    • SHA512

      75c368ecc0344840272a7fd759f730d18cef3295fa1cb789e979158e272b73aed6a5a8a11c9484980200b4c3c774f597209db700ca6510c123796744a30c6b9f

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszudnYTjipvF293vaRLEZ:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7h

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks