Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-19_ee73f47281164d35ef9d557011d42afc_cryptolocker

  • Size

    41KB

  • Sample

    240619-tba3raxfpr

  • MD5

    ee73f47281164d35ef9d557011d42afc

  • SHA1

    d9ec411c9b6cd7a03aa35daeedf423c6f061410f

  • SHA256

    69d195dacdbe21916378defdf0ec9c3b98ab5794a9a3b13f8adcb7e1c709b9fc

  • SHA512

    02e4d217ed213f0173b98c02b3eb9671ac3f6b91ec0f15519befe4e4980fcc2ec394829131b2a6777c20ffe61c2edf42a1a1356ef27f2648dcedfcb4cb0d517f

  • SSDEEP

    768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7x7:ZzFbxmLPWQMOtEvwDpjLeJAsKcb79

Score
10/10

Malware Config

Targets

    • Target

      2024-06-19_ee73f47281164d35ef9d557011d42afc_cryptolocker

    • Size

      41KB

    • MD5

      ee73f47281164d35ef9d557011d42afc

    • SHA1

      d9ec411c9b6cd7a03aa35daeedf423c6f061410f

    • SHA256

      69d195dacdbe21916378defdf0ec9c3b98ab5794a9a3b13f8adcb7e1c709b9fc

    • SHA512

      02e4d217ed213f0173b98c02b3eb9671ac3f6b91ec0f15519befe4e4980fcc2ec394829131b2a6777c20ffe61c2edf42a1a1356ef27f2648dcedfcb4cb0d517f

    • SSDEEP

      768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLeJAsKuDb7x7:ZzFbxmLPWQMOtEvwDpjLeJAsKcb79

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks