Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-27_33e1a1899734632a92c882da7811b7ee_cryptolocker

  • Size

    44KB

  • Sample

    240527-s7jjbshc7y

  • MD5

    33e1a1899734632a92c882da7811b7ee

  • SHA1

    8ecc29244eb8b4ca86510f35a1246c6e1c9ff87c

  • SHA256

    de58ab0177dd7e5e33b2c10b3acec97c865e4b96699acf709d6485b125891d45

  • SHA512

    ee74d7450850ea408e3c842ce0f72a9bbda18c9ed290a4d97c10037e21a240f4e4f919a68b999d5d84d32b78275929bc6818107837182d6104026ee05bf0cd76

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUklh:bm74zYcgT/EkM0ryfjdL

Score
10/10

Malware Config

Targets

    • Target

      2024-05-27_33e1a1899734632a92c882da7811b7ee_cryptolocker

    • Size

      44KB

    • MD5

      33e1a1899734632a92c882da7811b7ee

    • SHA1

      8ecc29244eb8b4ca86510f35a1246c6e1c9ff87c

    • SHA256

      de58ab0177dd7e5e33b2c10b3acec97c865e4b96699acf709d6485b125891d45

    • SHA512

      ee74d7450850ea408e3c842ce0f72a9bbda18c9ed290a4d97c10037e21a240f4e4f919a68b999d5d84d32b78275929bc6818107837182d6104026ee05bf0cd76

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUklh:bm74zYcgT/EkM0ryfjdL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks