Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-03_48638d1b7b3340b8e305a1f5a3ca5d3a_cryptolocker

  • Size

    78KB

  • Sample

    240603-d6q5fsbc38

  • MD5

    48638d1b7b3340b8e305a1f5a3ca5d3a

  • SHA1

    b7d780fc2eb8eb40980f925952633e9ddb62acf3

  • SHA256

    a2bc944e3818e500a1d4fcbd213ca7cd6193f04448e6ced538fa344ee0a3edbe

  • SHA512

    86b45135e28bb9c8f90250d3b5368b6808b6ac22aacd8cf1846ec9b9a738881c9d1f9c8daee23550c91875c5938e0150a38d4295571854ca1a27ef1d65b476e6

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufXi:vCjsIOtEvwDpj5H9YvQd2u

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_48638d1b7b3340b8e305a1f5a3ca5d3a_cryptolocker

    • Size

      78KB

    • MD5

      48638d1b7b3340b8e305a1f5a3ca5d3a

    • SHA1

      b7d780fc2eb8eb40980f925952633e9ddb62acf3

    • SHA256

      a2bc944e3818e500a1d4fcbd213ca7cd6193f04448e6ced538fa344ee0a3edbe

    • SHA512

      86b45135e28bb9c8f90250d3b5368b6808b6ac22aacd8cf1846ec9b9a738881c9d1f9c8daee23550c91875c5938e0150a38d4295571854ca1a27ef1d65b476e6

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIufXi:vCjsIOtEvwDpj5H9YvQd2u

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks