Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-25_21d6c7948a19304067fedc4d95ac3f7c_cryptolocker

  • Size

    34KB

  • Sample

    240125-x4pndseecq

  • MD5

    21d6c7948a19304067fedc4d95ac3f7c

  • SHA1

    c7c3f0e71cff186ac19336eb92fd7cd37985c9dc

  • SHA256

    d74a9dbada5add1402922ade29c1e7a7f40b01f93971aaa3273af0ad77e1f546

  • SHA512

    2b09cfef128eba7deb2cbb110b748e0ead999af5bc46f66b6dbbcb6df25c6f3bb11177ae9d80e8749c102454cd1713852e7c22e917a75ede8065c5914a671020

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLLAd:bA74zYcgT/Ekd0ryfj86U8zbCAd

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_21d6c7948a19304067fedc4d95ac3f7c_cryptolocker

    • Size

      34KB

    • MD5

      21d6c7948a19304067fedc4d95ac3f7c

    • SHA1

      c7c3f0e71cff186ac19336eb92fd7cd37985c9dc

    • SHA256

      d74a9dbada5add1402922ade29c1e7a7f40b01f93971aaa3273af0ad77e1f546

    • SHA512

      2b09cfef128eba7deb2cbb110b748e0ead999af5bc46f66b6dbbcb6df25c6f3bb11177ae9d80e8749c102454cd1713852e7c22e917a75ede8065c5914a671020

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUqMV6U8zKvGaLLAd:bA74zYcgT/Ekd0ryfj86U8zbCAd

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks