Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-24_18da331e2d3bb209c53fe606b74584d6_cryptolocker

  • Size

    96KB

  • Sample

    240524-ez7pasda98

  • MD5

    18da331e2d3bb209c53fe606b74584d6

  • SHA1

    f1193dba4d7bf8db3b703a1e5074d4b9613d26fa

  • SHA256

    919439028ea11e18e11d0e2a58e7c32e4f1a2c0fa769be638085e955cf260f39

  • SHA512

    288df3aa7abc142121ca2b1b6a5a6f93b73e8f31ce51d2d0aba1260bb13b9a53d7dc07a5cefba479d9e6b0602023daabe370b79ac0b40cae04ed8fc4ffdb69c6

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgph:V6a+pOtEvwDpjtze

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_18da331e2d3bb209c53fe606b74584d6_cryptolocker

    • Size

      96KB

    • MD5

      18da331e2d3bb209c53fe606b74584d6

    • SHA1

      f1193dba4d7bf8db3b703a1e5074d4b9613d26fa

    • SHA256

      919439028ea11e18e11d0e2a58e7c32e4f1a2c0fa769be638085e955cf260f39

    • SHA512

      288df3aa7abc142121ca2b1b6a5a6f93b73e8f31ce51d2d0aba1260bb13b9a53d7dc07a5cefba479d9e6b0602023daabe370b79ac0b40cae04ed8fc4ffdb69c6

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgph:V6a+pOtEvwDpjtze

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks