Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-30_ff8423649e5a9a243123efab8e22c303_cryptolocker

  • Size

    97KB

  • Sample

    240530-jhzdtaca44

  • MD5

    ff8423649e5a9a243123efab8e22c303

  • SHA1

    6c88d101ddd8633c29350a592b62c98e4c5f3449

  • SHA256

    dbc1484c7f2edb0e09dca1c54f0800e2c6aff0c66d176c95f5677a2bb2531f9d

  • SHA512

    9c0d330343e05b1bf3d836497cd25542636d0650a1bbca95322118c1a9739dac22507a30d3566837f4fe3c2edc9a10ef9850d0f9a89c352bc686147d43fc48f6

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0M:V6a+pOtEvwDpjtzk

Score
10/10

Malware Config

Targets

    • Target

      2024-05-30_ff8423649e5a9a243123efab8e22c303_cryptolocker

    • Size

      97KB

    • MD5

      ff8423649e5a9a243123efab8e22c303

    • SHA1

      6c88d101ddd8633c29350a592b62c98e4c5f3449

    • SHA256

      dbc1484c7f2edb0e09dca1c54f0800e2c6aff0c66d176c95f5677a2bb2531f9d

    • SHA512

      9c0d330343e05b1bf3d836497cd25542636d0650a1bbca95322118c1a9739dac22507a30d3566837f4fe3c2edc9a10ef9850d0f9a89c352bc686147d43fc48f6

    • SSDEEP

      1536:V6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNgp0M:V6a+pOtEvwDpjtzk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks