Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-30_941b5967881673d75b4a783e913e8e8d_cryptolocker

  • Size

    78KB

  • Sample

    240630-cgvkxasbqa

  • MD5

    941b5967881673d75b4a783e913e8e8d

  • SHA1

    e4d374b7705939c9ddf2066c984405dab5dab8c5

  • SHA256

    7b6966d7eb22725dbb68723a335d931c6a36187ccd479ab550b2278471b8f70d

  • SHA512

    20fe9fb64fba1c77193a87f2c6dd320ce7cf11ee7a737126734ddcf542818d1069f80d1a6106737d0cf504768fcded150935ca790d34768afabcce95ec68acb2

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktD:X6a+SOtEvwDpjBZYvQd2C

Score
10/10

Malware Config

Targets

    • Target

      2024-06-30_941b5967881673d75b4a783e913e8e8d_cryptolocker

    • Size

      78KB

    • MD5

      941b5967881673d75b4a783e913e8e8d

    • SHA1

      e4d374b7705939c9ddf2066c984405dab5dab8c5

    • SHA256

      7b6966d7eb22725dbb68723a335d931c6a36187ccd479ab550b2278471b8f70d

    • SHA512

      20fe9fb64fba1c77193a87f2c6dd320ce7cf11ee7a737126734ddcf542818d1069f80d1a6106737d0cf504768fcded150935ca790d34768afabcce95ec68acb2

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLktD:X6a+SOtEvwDpjBZYvQd2C

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks