Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-03_b9608b645983cb54ecae9033ce7819c6_cryptolocker

  • Size

    46KB

  • Sample

    240603-c327wahf44

  • MD5

    b9608b645983cb54ecae9033ce7819c6

  • SHA1

    43030da85ee47a85dff010008aa46e3c359cf1f6

  • SHA256

    aedfd418fdbc3440a3e56088dd504afa56ec812b55ac2f56b8fee66c485a9116

  • SHA512

    e62d5b87e01814e59898981699a20ea444e39c24ea6753e71bb6d94fbde5103839bbbd7a58fb2dd07374daa100713f8d7baf56f7d76f99ebd19988548474a27b

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAP6:P6QFElP6k+MRQMOtEvwDpjBQpVX/

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_b9608b645983cb54ecae9033ce7819c6_cryptolocker

    • Size

      46KB

    • MD5

      b9608b645983cb54ecae9033ce7819c6

    • SHA1

      43030da85ee47a85dff010008aa46e3c359cf1f6

    • SHA256

      aedfd418fdbc3440a3e56088dd504afa56ec812b55ac2f56b8fee66c485a9116

    • SHA512

      e62d5b87e01814e59898981699a20ea444e39c24ea6753e71bb6d94fbde5103839bbbd7a58fb2dd07374daa100713f8d7baf56f7d76f99ebd19988548474a27b

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAP6:P6QFElP6k+MRQMOtEvwDpjBQpVX/

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks