Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-04_4d6be2cd723c8d005fcd8d011bcc27c8_cryptolocker

  • Size

    37KB

  • Sample

    240204-rse2xsbgd2

  • MD5

    4d6be2cd723c8d005fcd8d011bcc27c8

  • SHA1

    55e7cbe8ff59177b241af8983ab963b4f5b258ae

  • SHA256

    a19f49bc321326c5361f10fc216789bb894f993ccbe9c8530a661d8711be0aa1

  • SHA512

    69a3684d7b5340fec6dd366aac71f9efa8d00f36c329a6c31fdb563f24e5758f2e2ff939ba91080144d4478aab84af927c81df9b5ed60f314d78cf729ba20095

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXuni8LBEc:btB9g/WItCSsAGjX7e9N0hunLSc

Score
10/10

Malware Config

Targets

    • Target

      2024-02-04_4d6be2cd723c8d005fcd8d011bcc27c8_cryptolocker

    • Size

      37KB

    • MD5

      4d6be2cd723c8d005fcd8d011bcc27c8

    • SHA1

      55e7cbe8ff59177b241af8983ab963b4f5b258ae

    • SHA256

      a19f49bc321326c5361f10fc216789bb894f993ccbe9c8530a661d8711be0aa1

    • SHA512

      69a3684d7b5340fec6dd366aac71f9efa8d00f36c329a6c31fdb563f24e5758f2e2ff939ba91080144d4478aab84af927c81df9b5ed60f314d78cf729ba20095

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXuni8LBEc:btB9g/WItCSsAGjX7e9N0hunLSc

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks