Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-23_2daedc9104ad05d3189cccd79726850e_cryptolocker

  • Size

    52KB

  • Sample

    240523-znzvjaga3y

  • MD5

    2daedc9104ad05d3189cccd79726850e

  • SHA1

    87e9ef4e7841c15d99af9b0c84ad68b5060b7452

  • SHA256

    2480d7025b9f7db326bc3c5e7242f6c5fb1afa9d532522c0fb8886e7f18cc074

  • SHA512

    ff0525d124769e4deb5a7a1c85a44ba995518674d23540f8072fc3369dd1cb96a33587aa5593fb71b4a48768cb286d11b07623251fc941d66b54f0422ea5b1f9

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfS0:79mqyNhQMOtEvwDpjBxe8GGfz

Score
10/10

Malware Config

Targets

    • Target

      2024-05-23_2daedc9104ad05d3189cccd79726850e_cryptolocker

    • Size

      52KB

    • MD5

      2daedc9104ad05d3189cccd79726850e

    • SHA1

      87e9ef4e7841c15d99af9b0c84ad68b5060b7452

    • SHA256

      2480d7025b9f7db326bc3c5e7242f6c5fb1afa9d532522c0fb8886e7f18cc074

    • SHA512

      ff0525d124769e4deb5a7a1c85a44ba995518674d23540f8072fc3369dd1cb96a33587aa5593fb71b4a48768cb286d11b07623251fc941d66b54f0422ea5b1f9

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBK/rJ+Nw8qnTHGfS0:79mqyNhQMOtEvwDpjBxe8GGfz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks