Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-04_4e4486194b6178f8e0ff89a1ee070e69_cryptolocker

  • Size

    50KB

  • Sample

    240604-1cmlhach39

  • MD5

    4e4486194b6178f8e0ff89a1ee070e69

  • SHA1

    fe762551de8a2dfb346157803c9ff0a3c16c2dc3

  • SHA256

    116252f981f1c3f25f39ef9c2225017dc1920ef95b45143915eca06fe6424c69

  • SHA512

    b0b9c4ec9930e2fa7e96e9077441ecbdaf3dd7b268dc889a8ba258de0569018ea8f2cb380c521eacdffdf66a3b8bcc879e38f0144c4bfe5576b3e9939bb407e8

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfb:X6QFElP6n+gJBMOtEvwDpjBtEdXfb

Score
10/10

Malware Config

Targets

    • Target

      2024-06-04_4e4486194b6178f8e0ff89a1ee070e69_cryptolocker

    • Size

      50KB

    • MD5

      4e4486194b6178f8e0ff89a1ee070e69

    • SHA1

      fe762551de8a2dfb346157803c9ff0a3c16c2dc3

    • SHA256

      116252f981f1c3f25f39ef9c2225017dc1920ef95b45143915eca06fe6424c69

    • SHA512

      b0b9c4ec9930e2fa7e96e9077441ecbdaf3dd7b268dc889a8ba258de0569018ea8f2cb380c521eacdffdf66a3b8bcc879e38f0144c4bfe5576b3e9939bb407e8

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vdXfb:X6QFElP6n+gJBMOtEvwDpjBtEdXfb

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks