Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-16_1b8ab109f477845a5f4137c4337d2632_cryptolocker

  • Size

    86KB

  • Sample

    240616-x3jezstemd

  • MD5

    1b8ab109f477845a5f4137c4337d2632

  • SHA1

    8d60bf574b173b66687a4ca5b7756ee08c08f16e

  • SHA256

    cb06630f7fa21f293ded6c79237a9d9bf811748d7693dc528446e593774cb6de

  • SHA512

    690da037f4094df748455f667475232114d10d6ffa98dbee140ca97c19bfb9038db68e083246f2fad7718fca5077bdef63f07db24dd0824e463c589746d06f97

  • SSDEEP

    1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+a:TCjsIOtEvwDpj5HE/OUHnSM4

Score
10/10

Malware Config

Targets

    • Target

      2024-06-16_1b8ab109f477845a5f4137c4337d2632_cryptolocker

    • Size

      86KB

    • MD5

      1b8ab109f477845a5f4137c4337d2632

    • SHA1

      8d60bf574b173b66687a4ca5b7756ee08c08f16e

    • SHA256

      cb06630f7fa21f293ded6c79237a9d9bf811748d7693dc528446e593774cb6de

    • SHA512

      690da037f4094df748455f667475232114d10d6ffa98dbee140ca97c19bfb9038db68e083246f2fad7718fca5077bdef63f07db24dd0824e463c589746d06f97

    • SSDEEP

      1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMMrC+a:TCjsIOtEvwDpj5HE/OUHnSM4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks