Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-10_f191ad552423b6cb66793ff22dd37bef_cryptolocker

  • Size

    47KB

  • Sample

    240610-ny4qpaac69

  • MD5

    f191ad552423b6cb66793ff22dd37bef

  • SHA1

    ecf6aa74d33dc507a5d347e246268dffd11b0e6f

  • SHA256

    6bb01522743924f7b11a5592a4938945eaa3201625e1255bd6f01cefceeabc31

  • SHA512

    497b19d498706042dba396db7b0b901351a73e62fe3533ba89f235a724eee04070e69b74fb57c1311502769afd94d436800e6da574e25d2b607b55e51edcce0f

  • SSDEEP

    768:79inqyNR/QtOOtEvwDpjBKccJVODvy3SpUv:79mqyNhQMOtEvwDpjBzckqS+

Score
10/10

Malware Config

Targets

    • Target

      2024-06-10_f191ad552423b6cb66793ff22dd37bef_cryptolocker

    • Size

      47KB

    • MD5

      f191ad552423b6cb66793ff22dd37bef

    • SHA1

      ecf6aa74d33dc507a5d347e246268dffd11b0e6f

    • SHA256

      6bb01522743924f7b11a5592a4938945eaa3201625e1255bd6f01cefceeabc31

    • SHA512

      497b19d498706042dba396db7b0b901351a73e62fe3533ba89f235a724eee04070e69b74fb57c1311502769afd94d436800e6da574e25d2b607b55e51edcce0f

    • SSDEEP

      768:79inqyNR/QtOOtEvwDpjBKccJVODvy3SpUv:79mqyNhQMOtEvwDpjBzckqS+

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks