Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-01_5d5008fe06603752e27c93cf7860d982_cryptolocker

  • Size

    46KB

  • Sample

    240601-kbprgagb53

  • MD5

    5d5008fe06603752e27c93cf7860d982

  • SHA1

    34884431a600f265806ef8b23b7929f4227ebf9f

  • SHA256

    f0fd4957cd45f766244bac22e0571c4cc155360ee2a476657c1bcb811df50043

  • SHA512

    b3b344d42a9bcd1bead4e80093aee84ac11b3b16fa388c00c4aea203e4e93dce34d2c3a61d259eb345f8e33428c70ca80b919958f10b6e3e95fdce36072ded00

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqc:bc/y2lkF0+Beqc

Score
10/10

Malware Config

Targets

    • Target

      2024-06-01_5d5008fe06603752e27c93cf7860d982_cryptolocker

    • Size

      46KB

    • MD5

      5d5008fe06603752e27c93cf7860d982

    • SHA1

      34884431a600f265806ef8b23b7929f4227ebf9f

    • SHA256

      f0fd4957cd45f766244bac22e0571c4cc155360ee2a476657c1bcb811df50043

    • SHA512

      b3b344d42a9bcd1bead4e80093aee84ac11b3b16fa388c00c4aea203e4e93dce34d2c3a61d259eb345f8e33428c70ca80b919958f10b6e3e95fdce36072ded00

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqc:bc/y2lkF0+Beqc

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks