Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-29_58048df9a86bdb437b845510172f2241_cryptolocker

  • Size

    49KB

  • Sample

    240529-syx1csae8v

  • MD5

    58048df9a86bdb437b845510172f2241

  • SHA1

    bc115bee22e5751d6a4ee71ad5e2cbe4a6f6ad29

  • SHA256

    cfbaa41d184a0a39aaaa44d9b2b71bee463425407aaa512413f9a67402b69012

  • SHA512

    b4c88730135dca54e8a9ad1f6e684da3f95a14860e41658dd1489ba75718cf8e3367cd31e9cb81d2ff10599384919e1f5b0c421ab490c1463fbf1836f2886efb

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYsm06Md:xj+VGMOtEvwDpjy+viHs7pd

Score
10/10

Malware Config

Targets

    • Target

      2024-05-29_58048df9a86bdb437b845510172f2241_cryptolocker

    • Size

      49KB

    • MD5

      58048df9a86bdb437b845510172f2241

    • SHA1

      bc115bee22e5751d6a4ee71ad5e2cbe4a6f6ad29

    • SHA256

      cfbaa41d184a0a39aaaa44d9b2b71bee463425407aaa512413f9a67402b69012

    • SHA512

      b4c88730135dca54e8a9ad1f6e684da3f95a14860e41658dd1489ba75718cf8e3367cd31e9cb81d2ff10599384919e1f5b0c421ab490c1463fbf1836f2886efb

    • SSDEEP

      768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYsm06Md:xj+VGMOtEvwDpjy+viHs7pd

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks