Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-26_5d823dd093c392e8a621f92859b795bd_cryptolocker

  • Size

    44KB

  • Sample

    240526-aqh75agf49

  • MD5

    5d823dd093c392e8a621f92859b795bd

  • SHA1

    1b3f79d485f26a5d10d0358a286692788820995e

  • SHA256

    79da46a5d8597eef1b46b70b2000e4330c6a5a50bade71e8e4ee75f64454a8f8

  • SHA512

    2dc177b7b8d9fa38f2a46bcfef2ecf187fb665cf2cf82aff0c054c8c18fc6c2625fef573c0540cf9f318a1f37a5eb9f61cec13b1ce84ac0f48521f8f525a6841

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDk:bm74zYcgT/Ekn0ryfjvk

Score
10/10

Malware Config

Targets

    • Target

      2024-05-26_5d823dd093c392e8a621f92859b795bd_cryptolocker

    • Size

      44KB

    • MD5

      5d823dd093c392e8a621f92859b795bd

    • SHA1

      1b3f79d485f26a5d10d0358a286692788820995e

    • SHA256

      79da46a5d8597eef1b46b70b2000e4330c6a5a50bade71e8e4ee75f64454a8f8

    • SHA512

      2dc177b7b8d9fa38f2a46bcfef2ecf187fb665cf2cf82aff0c054c8c18fc6c2625fef573c0540cf9f318a1f37a5eb9f61cec13b1ce84ac0f48521f8f525a6841

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUIDk:bm74zYcgT/Ekn0ryfjvk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks