Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-28_e91ac2f686098e762d5a26c7cdabc5ef_cryptolocker

  • Size

    54KB

  • Sample

    240528-hrhlzsab2s

  • MD5

    e91ac2f686098e762d5a26c7cdabc5ef

  • SHA1

    a81da7f1d5c6866c780b447c028f913624187711

  • SHA256

    799a265a1d5a18759144cc95f539daf1106593ca8341e5a5497c19c29a52ca49

  • SHA512

    9aa365303f91ac40aa4fb9c04aebcdabbd84fe153662b9e62937c23531003f0645d26ba03614f2411b5b642f36460545bb05a1620e85885ef5875a84314f18c2

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIE:X6QFElP6n+gJBMOtEvwDpjBtExml/

Score
10/10

Malware Config

Targets

    • Target

      2024-05-28_e91ac2f686098e762d5a26c7cdabc5ef_cryptolocker

    • Size

      54KB

    • MD5

      e91ac2f686098e762d5a26c7cdabc5ef

    • SHA1

      a81da7f1d5c6866c780b447c028f913624187711

    • SHA256

      799a265a1d5a18759144cc95f539daf1106593ca8341e5a5497c19c29a52ca49

    • SHA512

      9aa365303f91ac40aa4fb9c04aebcdabbd84fe153662b9e62937c23531003f0645d26ba03614f2411b5b642f36460545bb05a1620e85885ef5875a84314f18c2

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vxmlcaTIE:X6QFElP6n+gJBMOtEvwDpjBtExml/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks