Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-10_0af184dc6d2b5c1a1ea944d7d635fb3b_cryptolocker

  • Size

    71KB

  • Sample

    240610-mtbnnsgb6v

  • MD5

    0af184dc6d2b5c1a1ea944d7d635fb3b

  • SHA1

    738aec0b7c6fa6186264b082f543d22c64046f18

  • SHA256

    c281edbcf4d90093063794de02d2b3bad397eea3d977ff98307de773dc54b425

  • SHA512

    fc86d679f9138cd8171f33642ff27edf381163c18997ebfc7fcd058f4b9d77b2d7ff218e2b3e892f09a6f8ca07896fe419cb31b06c370455cae33aa4e48580b8

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO2:DW60sllyWOtEvwDpjwF85V

Score
10/10

Malware Config

Targets

    • Target

      2024-06-10_0af184dc6d2b5c1a1ea944d7d635fb3b_cryptolocker

    • Size

      71KB

    • MD5

      0af184dc6d2b5c1a1ea944d7d635fb3b

    • SHA1

      738aec0b7c6fa6186264b082f543d22c64046f18

    • SHA256

      c281edbcf4d90093063794de02d2b3bad397eea3d977ff98307de773dc54b425

    • SHA512

      fc86d679f9138cd8171f33642ff27edf381163c18997ebfc7fcd058f4b9d77b2d7ff218e2b3e892f09a6f8ca07896fe419cb31b06c370455cae33aa4e48580b8

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUNZO2:DW60sllyWOtEvwDpjwF85V

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks