Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-13_96a744ade6f0d21f59e1d0ed786b238d_cryptolocker

  • Size

    37KB

  • Sample

    240213-xcedcage96

  • MD5

    96a744ade6f0d21f59e1d0ed786b238d

  • SHA1

    deafc8b0a3684b7b7740744765cb52686e3331bd

  • SHA256

    a762310970591fc8f3ec3fd2b25028691e8aad5f484c887f770f606fde517a12

  • SHA512

    c537a1ad230afa13e80c218d7537636333001ba1f1ce5ce081eb5ea68fe1db176d39119aa7ee2680feaa4108afe4a5a20b06f923b3e673abafc674cfaccdd23a

  • SSDEEP

    384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZr/0Q:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/b

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_96a744ade6f0d21f59e1d0ed786b238d_cryptolocker

    • Size

      37KB

    • MD5

      96a744ade6f0d21f59e1d0ed786b238d

    • SHA1

      deafc8b0a3684b7b7740744765cb52686e3331bd

    • SHA256

      a762310970591fc8f3ec3fd2b25028691e8aad5f484c887f770f606fde517a12

    • SHA512

      c537a1ad230afa13e80c218d7537636333001ba1f1ce5ce081eb5ea68fe1db176d39119aa7ee2680feaa4108afe4a5a20b06f923b3e673abafc674cfaccdd23a

    • SSDEEP

      384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZr/0Q:bgX4zYcgTEu6QOaryfjqDDw3sCu5q/b

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks