Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-03_c8a5490c242d8341ad533ba2d3c2eac8_cryptolocker

  • Size

    69KB

  • Sample

    240603-ej2s4sae5y

  • MD5

    c8a5490c242d8341ad533ba2d3c2eac8

  • SHA1

    4a8ecdd42843cc4984f25feb3ab9f3b7739e3694

  • SHA256

    b04b39d2d999170110d39edec01af423f5bf53f8b6271a33f9cf33e988e2f4ec

  • SHA512

    a011a28ee9ee3d1bad6aa708adbd5a5450ae5b1489fe28199febc467aed14f390536281fbf79c58b1955c6f61ceaea1f118ff0eda073b41252a4986a853e3c78

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dx:i5nkFGMOtEvwDpjNbwQEI8UZD7

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_c8a5490c242d8341ad533ba2d3c2eac8_cryptolocker

    • Size

      69KB

    • MD5

      c8a5490c242d8341ad533ba2d3c2eac8

    • SHA1

      4a8ecdd42843cc4984f25feb3ab9f3b7739e3694

    • SHA256

      b04b39d2d999170110d39edec01af423f5bf53f8b6271a33f9cf33e988e2f4ec

    • SHA512

      a011a28ee9ee3d1bad6aa708adbd5a5450ae5b1489fe28199febc467aed14f390536281fbf79c58b1955c6f61ceaea1f118ff0eda073b41252a4986a853e3c78

    • SSDEEP

      768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dx:i5nkFGMOtEvwDpjNbwQEI8UZD7

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Detects executables built or packed with MPress PE compressor

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks