Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-09_9be9eb31d7b02c5ec7c141d648c06252_cryptolocker

  • Size

    44KB

  • Sample

    240309-s3p6babc37

  • MD5

    9be9eb31d7b02c5ec7c141d648c06252

  • SHA1

    8c1fe350244989ad104cc2f415d9360a03d6fcc1

  • SHA256

    6c47b6c1e10754b709c637c001bc2b9e730fead0722373c2d4feb88243840272

  • SHA512

    deebf80940b86f23b4993e14b1169d6b20b3c7ebd8968a88f865e8dc86e1cfdd7a2507625504cee1481ea7ad464953ea3797f41fe38c817d80e122c4a31e5b2b

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqRoN6Nh:bxNrC7kYo1Fxf3s05rwxbFvN6Nh

Score
10/10

Malware Config

Targets

    • Target

      2024-03-09_9be9eb31d7b02c5ec7c141d648c06252_cryptolocker

    • Size

      44KB

    • MD5

      9be9eb31d7b02c5ec7c141d648c06252

    • SHA1

      8c1fe350244989ad104cc2f415d9360a03d6fcc1

    • SHA256

      6c47b6c1e10754b709c637c001bc2b9e730fead0722373c2d4feb88243840272

    • SHA512

      deebf80940b86f23b4993e14b1169d6b20b3c7ebd8968a88f865e8dc86e1cfdd7a2507625504cee1481ea7ad464953ea3797f41fe38c817d80e122c4a31e5b2b

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen754XcwxbFqRoN6Nh:bxNrC7kYo1Fxf3s05rwxbFvN6Nh

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks