Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-24_02d981816ea856323a346ba916cc6b4a_cryptolocker

  • Size

    46KB

  • Sample

    240524-mfcntadf86

  • MD5

    02d981816ea856323a346ba916cc6b4a

  • SHA1

    8190c995bb0269c68298c7d0281d79843f31201c

  • SHA256

    87c6b7a5a925fb3ef826d0bc5b622a02ee422ec896de079f3ba594a01029edf4

  • SHA512

    ad84915db66ac105cbdf162a2930a949b4f68d8fe70448500d9e3d681bcb13df6b597340b722dd63a3f14d15290335c4d940b664a82a4fff3438be96396f8bbd

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPo8:P6QFElP6k+MRQMOtEvwDpjBQpVXz8

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_02d981816ea856323a346ba916cc6b4a_cryptolocker

    • Size

      46KB

    • MD5

      02d981816ea856323a346ba916cc6b4a

    • SHA1

      8190c995bb0269c68298c7d0281d79843f31201c

    • SHA256

      87c6b7a5a925fb3ef826d0bc5b622a02ee422ec896de079f3ba594a01029edf4

    • SHA512

      ad84915db66ac105cbdf162a2930a949b4f68d8fe70448500d9e3d681bcb13df6b597340b722dd63a3f14d15290335c4d940b664a82a4fff3438be96396f8bbd

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPo8:P6QFElP6k+MRQMOtEvwDpjBQpVXz8

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks