Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-31_0e7afbb0f0f5ac291c89a8b37b34ee5a_cryptolocker

  • Size

    41KB

  • Sample

    240531-cw7h1sbh7v

  • MD5

    0e7afbb0f0f5ac291c89a8b37b34ee5a

  • SHA1

    53ccaac2a49e8b4259d4ddbfa7fcc65d98ab81be

  • SHA256

    075946e6897a9c1a31e4caa7ff1c5f2b0c6fa3bd7ec50c167bc8d526deadda8d

  • SHA512

    077068b4c6616b411e5b16a3bc91ccdfabb5f37140417c9fabcb06859c7cef84fdbb521cd4d73fd79175e319157bf850824bfd4a7d5f6ed04c58050fa925b4e4

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95i:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFI

Score
10/10

Malware Config

Targets

    • Target

      2024-05-31_0e7afbb0f0f5ac291c89a8b37b34ee5a_cryptolocker

    • Size

      41KB

    • MD5

      0e7afbb0f0f5ac291c89a8b37b34ee5a

    • SHA1

      53ccaac2a49e8b4259d4ddbfa7fcc65d98ab81be

    • SHA256

      075946e6897a9c1a31e4caa7ff1c5f2b0c6fa3bd7ec50c167bc8d526deadda8d

    • SHA512

      077068b4c6616b411e5b16a3bc91ccdfabb5f37140417c9fabcb06859c7cef84fdbb521cd4d73fd79175e319157bf850824bfd4a7d5f6ed04c58050fa925b4e4

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95i:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks