Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-21_5f23533d24f355dcc246936c097894cd_cryptolocker

  • Size

    97KB

  • Sample

    240521-z87qwaba2x

  • MD5

    5f23533d24f355dcc246936c097894cd

  • SHA1

    3306f0bdfba587858fb3ca15f28ff7900ff9677c

  • SHA256

    3277b967f0b0eadc77a7c8ff6f5c056676cf5e4ed321f38856c795f99f617f36

  • SHA512

    4be06d45e459cad4012fe8ba34afd7e86284646afe02ee38c2fc139be6183bc6d8c7b09fe11c670d5377239ba566bd25cb96404cee37e62e54933de497fea417

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0Wl:V6a+pOtEvwDpjtzC

Score
10/10

Malware Config

Targets

    • Target

      2024-05-21_5f23533d24f355dcc246936c097894cd_cryptolocker

    • Size

      97KB

    • MD5

      5f23533d24f355dcc246936c097894cd

    • SHA1

      3306f0bdfba587858fb3ca15f28ff7900ff9677c

    • SHA256

      3277b967f0b0eadc77a7c8ff6f5c056676cf5e4ed321f38856c795f99f617f36

    • SHA512

      4be06d45e459cad4012fe8ba34afd7e86284646afe02ee38c2fc139be6183bc6d8c7b09fe11c670d5377239ba566bd25cb96404cee37e62e54933de497fea417

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0Wl:V6a+pOtEvwDpjtzC

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks