Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-11_dc297de81b3eefe6fa9c5acff17b6391_cryptolocker

  • Size

    41KB

  • Sample

    240211-zhhztsbd6y

  • MD5

    dc297de81b3eefe6fa9c5acff17b6391

  • SHA1

    19a15523f70c948c77c8f2bc0dbcfb6670c140ae

  • SHA256

    809305acca7970cecbf196a21af8a044b902608111f06ea2907c452abcecbf09

  • SHA512

    7230b4cd48a2df67b8f1d33d1332b146d49c24616770eadc047de88694ea2ca45eba3c24dc7352640c3961e50ff75161decdc158ef9ca64391da3e3d314f2814

  • SSDEEP

    384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slGT:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s2

Score
10/10

Malware Config

Targets

    • Target

      2024-02-11_dc297de81b3eefe6fa9c5acff17b6391_cryptolocker

    • Size

      41KB

    • MD5

      dc297de81b3eefe6fa9c5acff17b6391

    • SHA1

      19a15523f70c948c77c8f2bc0dbcfb6670c140ae

    • SHA256

      809305acca7970cecbf196a21af8a044b902608111f06ea2907c452abcecbf09

    • SHA512

      7230b4cd48a2df67b8f1d33d1332b146d49c24616770eadc047de88694ea2ca45eba3c24dc7352640c3961e50ff75161decdc158ef9ca64391da3e3d314f2814

    • SSDEEP

      384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5co9+slGT:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+s2

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks