Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-22_3de34cbc7b686048f95c5e855a17479a_cryptolocker

  • Size

    29KB

  • Sample

    240222-2c66ksgc93

  • MD5

    3de34cbc7b686048f95c5e855a17479a

  • SHA1

    91adb6e34b66b9d3ee64f45466ce96c63edc59e3

  • SHA256

    0a816fc4dee585fe34a2b928afb9c7868854e9ee1b825c976c77aabb2ff6c167

  • SHA512

    d072bd190fb091ef62005614b1f0b645500bbbf646f7fc7bf2ce76d1175d8253004c1f394247bcef6405c10f2e372e9c06f249d4a7037a0c3a4bcc0441a4c525

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5STBxVG:bA74zYcgT/Ekd0ryfjQRSnWBxg

Score
10/10

Malware Config

Targets

    • Target

      2024-02-22_3de34cbc7b686048f95c5e855a17479a_cryptolocker

    • Size

      29KB

    • MD5

      3de34cbc7b686048f95c5e855a17479a

    • SHA1

      91adb6e34b66b9d3ee64f45466ce96c63edc59e3

    • SHA256

      0a816fc4dee585fe34a2b928afb9c7868854e9ee1b825c976c77aabb2ff6c167

    • SHA512

      d072bd190fb091ef62005614b1f0b645500bbbf646f7fc7bf2ce76d1175d8253004c1f394247bcef6405c10f2e372e9c06f249d4a7037a0c3a4bcc0441a4c525

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5STBxVG:bA74zYcgT/Ekd0ryfjQRSnWBxg

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks