Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.2023-09-06_e4492675da60f70488d6d000bf349af7_cryptolocker_JC.exe

  • Size

    29KB

  • Sample

    231022-nb3vwahf48

  • MD5

    e4492675da60f70488d6d000bf349af7

  • SHA1

    266a34016ed39bb24a67bbe720e585589ee3a843

  • SHA256

    0006dd7155118f6af481cbb9ba89f84b91b2197f8780611a8a2f4ed0e5a0c600

  • SHA512

    6a8b129fc5ad5927f5fd7f8391f1db214329617313edc79437fd10271661cf20ade198c47d91ecf1bd34b2c5b9b8f6519ab3ba5f2e88721362c93a862dc1f3f4

  • SSDEEP

    384:v0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26Rsn1rCcOQtOOtEvwDpjqIGRS/Vb9hk:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4zI

Score
7/10

Malware Config

Targets

    • Target

      NEAS.2023-09-06_e4492675da60f70488d6d000bf349af7_cryptolocker_JC.exe

    • Size

      29KB

    • MD5

      e4492675da60f70488d6d000bf349af7

    • SHA1

      266a34016ed39bb24a67bbe720e585589ee3a843

    • SHA256

      0006dd7155118f6af481cbb9ba89f84b91b2197f8780611a8a2f4ed0e5a0c600

    • SHA512

      6a8b129fc5ad5927f5fd7f8391f1db214329617313edc79437fd10271661cf20ade198c47d91ecf1bd34b2c5b9b8f6519ab3ba5f2e88721362c93a862dc1f3f4

    • SSDEEP

      384:v0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26Rsn1rCcOQtOOtEvwDpjqIGRS/Vb9hk:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4zI

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks