Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-28_b056add30610287691460e958096422e_cryptolocker

  • Size

    46KB

  • Sample

    240228-2d7thafd4z

  • MD5

    b056add30610287691460e958096422e

  • SHA1

    efe351130ebe79c8eb4c081b8588e5e4499339a1

  • SHA256

    f25d40e1767be77e4145cb59c1e45634c7e8c81d641c53a975f2635e63245934

  • SHA512

    422ddcad4e0205fe5511118d40aa12c047d827867e189cb174a76fe2409480e78d2eba398e79ce3426edf28472265c0d614bee4f7dc44c736857e26ca93bc322

  • SSDEEP

    768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5q4X:btB9g/xtCSKfxLIc/C4X

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_b056add30610287691460e958096422e_cryptolocker

    • Size

      46KB

    • MD5

      b056add30610287691460e958096422e

    • SHA1

      efe351130ebe79c8eb4c081b8588e5e4499339a1

    • SHA256

      f25d40e1767be77e4145cb59c1e45634c7e8c81d641c53a975f2635e63245934

    • SHA512

      422ddcad4e0205fe5511118d40aa12c047d827867e189cb174a76fe2409480e78d2eba398e79ce3426edf28472265c0d614bee4f7dc44c736857e26ca93bc322

    • SSDEEP

      768:btB9g/WItCSsAGjX7r3BPOMHoc/QQJP5q4X:btB9g/xtCSKfxLIc/C4X

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks