Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-20_e52b76a19f5b9be5fd9b4321658b6d8e_cryptolocker

  • Size

    47KB

  • Sample

    240520-xmglfsch49

  • MD5

    e52b76a19f5b9be5fd9b4321658b6d8e

  • SHA1

    3977a8ab708c8974f40148ba4bafbab464672b57

  • SHA256

    a74b0bcb4af736f46b287de7e9b0d7531bee10e6e055dac1baca578506387195

  • SHA512

    83f23e08119d04e7cb7c1f4eb226796e2a45e9a1d449ff36554f9db8568c3d575ecbab8e7494019f34008e9742283bad3aea286aaff77540ae15fa09ceea3ede

  • SSDEEP

    384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2V4:79inqyNR/QtOOtEvwDpjBKccJVODvy3p

Score
10/10

Malware Config

Targets

    • Target

      2024-05-20_e52b76a19f5b9be5fd9b4321658b6d8e_cryptolocker

    • Size

      47KB

    • MD5

      e52b76a19f5b9be5fd9b4321658b6d8e

    • SHA1

      3977a8ab708c8974f40148ba4bafbab464672b57

    • SHA256

      a74b0bcb4af736f46b287de7e9b0d7531bee10e6e055dac1baca578506387195

    • SHA512

      83f23e08119d04e7cb7c1f4eb226796e2a45e9a1d449ff36554f9db8568c3d575ecbab8e7494019f34008e9742283bad3aea286aaff77540ae15fa09ceea3ede

    • SSDEEP

      384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2V4:79inqyNR/QtOOtEvwDpjBKccJVODvy3p

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks