Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-24_e0d511f7fd9f70d49c795034cde00e98_cryptolocker

  • Size

    41KB

  • Sample

    240524-p7c5rseb28

  • MD5

    e0d511f7fd9f70d49c795034cde00e98

  • SHA1

    48f85cd4ac4449173b7e9039563c6f65fbd03109

  • SHA256

    0b4ce3786d7d9f20959dbf6fe829f381577cd1bccebfb6ec388dc281d9781939

  • SHA512

    6801785d99bbaa2c96aa60389e664326cf4ad9a0afb9aea1f5d790ca5261cde3ed933f99ea00d1b2a424503c8ce0a946a9009b4065c20c754f9d7b278556d450

  • SSDEEP

    768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7n:bCDOw9aMDooc+vA7n

Score
10/10

Malware Config

Targets

    • Target

      2024-05-24_e0d511f7fd9f70d49c795034cde00e98_cryptolocker

    • Size

      41KB

    • MD5

      e0d511f7fd9f70d49c795034cde00e98

    • SHA1

      48f85cd4ac4449173b7e9039563c6f65fbd03109

    • SHA256

      0b4ce3786d7d9f20959dbf6fe829f381577cd1bccebfb6ec388dc281d9781939

    • SHA512

      6801785d99bbaa2c96aa60389e664326cf4ad9a0afb9aea1f5d790ca5261cde3ed933f99ea00d1b2a424503c8ce0a946a9009b4065c20c754f9d7b278556d450

    • SSDEEP

      768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn7n:bCDOw9aMDooc+vA7n

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks