Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-23_b0626dcb8555133b8b707540803890ce_cryptolocker

  • Size

    96KB

  • Sample

    240523-z259gagg51

  • MD5

    b0626dcb8555133b8b707540803890ce

  • SHA1

    ec7a956dfe6687ebfe5ef4cd973277f49f4b662d

  • SHA256

    6b1970ca7513bc93c8fafa8603632ad403ece265e90ad12856e094b09bdf2dad

  • SHA512

    3788c99c4e102c298cfb7f91dbeacf9a36493c956eae0f29036e0fa2b2fca1eb9dc4ed324d088ae0814d53e38a0993f4abd5cc10acbfa0ee5a1cbacada99d47f

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJY/:xj+VGMOtEvwDpjubwQEIiVmks/

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_b0626dcb8555133b8b707540803890ce_cryptolocker

    • Size

      96KB

    • MD5

      b0626dcb8555133b8b707540803890ce

    • SHA1

      ec7a956dfe6687ebfe5ef4cd973277f49f4b662d

    • SHA256

      6b1970ca7513bc93c8fafa8603632ad403ece265e90ad12856e094b09bdf2dad

    • SHA512

      3788c99c4e102c298cfb7f91dbeacf9a36493c956eae0f29036e0fa2b2fca1eb9dc4ed324d088ae0814d53e38a0993f4abd5cc10acbfa0ee5a1cbacada99d47f

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJY/:xj+VGMOtEvwDpjubwQEIiVmks/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks