Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-04_ee7845b37f8d3169f978cb968a4a74a6_cryptolocker

  • Size

    36KB

  • Sample

    240204-az8jdafghp

  • MD5

    ee7845b37f8d3169f978cb968a4a74a6

  • SHA1

    2ef1ab22b799b1d8ac7f3434d93a0c30735ebb25

  • SHA256

    75dee1835cbd30d95936dd46adab04043acab4cdb681ac002dcfed2f338201f0

  • SHA512

    15de7d2096d484d1735b9c49caddb189b43fc3d1bfd337e1d935c7c88791145c1e5f6b43005afd114e605cf93d26d35b67a813da68a607de84a0da01c425533a

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbiF:bAvJCYOOvbRPDEgXrNekd7l94i3piF

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_ee7845b37f8d3169f978cb968a4a74a6_cryptolocker

    • Size

      36KB

    • MD5

      ee7845b37f8d3169f978cb968a4a74a6

    • SHA1

      2ef1ab22b799b1d8ac7f3434d93a0c30735ebb25

    • SHA256

      75dee1835cbd30d95936dd46adab04043acab4cdb681ac002dcfed2f338201f0

    • SHA512

      15de7d2096d484d1735b9c49caddb189b43fc3d1bfd337e1d935c7c88791145c1e5f6b43005afd114e605cf93d26d35b67a813da68a607de84a0da01c425533a

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbiF:bAvJCYOOvbRPDEgXrNekd7l94i3piF

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks