Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-15_37cb6a33dca04cedc79927e19a81df7d_cryptolocker

  • Size

    96KB

  • Sample

    240515-1a5pascg7x

  • MD5

    37cb6a33dca04cedc79927e19a81df7d

  • SHA1

    dccbadf5371b450d8d7ff3ff0463a4ca739f3b38

  • SHA256

    3b700db5676b3baa8fa4bad2911c67118a5fc1ed1adbe9c9798b7ea614dfd554

  • SHA512

    ed2ab774a230aeb1034008c7d218e89be0fc94ba5a9f57f2bff51adad413b9b99442951d4a0700de5e04fd63e7726972754230a098d1fe31e806eeec0e4fe027

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYT6:xj+VGMOtEvwDpjubwQEIiVmksW

Score
10/10

Malware Config

Targets

    • Target

      2024-05-15_37cb6a33dca04cedc79927e19a81df7d_cryptolocker

    • Size

      96KB

    • MD5

      37cb6a33dca04cedc79927e19a81df7d

    • SHA1

      dccbadf5371b450d8d7ff3ff0463a4ca739f3b38

    • SHA256

      3b700db5676b3baa8fa4bad2911c67118a5fc1ed1adbe9c9798b7ea614dfd554

    • SHA512

      ed2ab774a230aeb1034008c7d218e89be0fc94ba5a9f57f2bff51adad413b9b99442951d4a0700de5e04fd63e7726972754230a098d1fe31e806eeec0e4fe027

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYT6:xj+VGMOtEvwDpjubwQEIiVmksW

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks