Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-12_b4608a61e55870acb4c00db64531d621_cryptolocker

  • Size

    31KB

  • Sample

    240312-fj5qfaah62

  • MD5

    b4608a61e55870acb4c00db64531d621

  • SHA1

    b09be878f4d5fb18753adb16471415927f160553

  • SHA256

    46dca50350c35499b3fecff3b416dff5a0f4120052af5a74d1b88164db7c71f3

  • SHA512

    85021f5af63d448e2123786ec7a7a89154a4835d943994c24f3d98665a1e8323a7c95f98150a83009428e4bc6304a09c902998c26a82822ec8ae4a04bdec5a9e

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAMub1:bAvJCYOOvbRPDEgXRc+BA/b1

Score
10/10

Malware Config

Targets

    • Target

      2024-03-12_b4608a61e55870acb4c00db64531d621_cryptolocker

    • Size

      31KB

    • MD5

      b4608a61e55870acb4c00db64531d621

    • SHA1

      b09be878f4d5fb18753adb16471415927f160553

    • SHA256

      46dca50350c35499b3fecff3b416dff5a0f4120052af5a74d1b88164db7c71f3

    • SHA512

      85021f5af63d448e2123786ec7a7a89154a4835d943994c24f3d98665a1e8323a7c95f98150a83009428e4bc6304a09c902998c26a82822ec8ae4a04bdec5a9e

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAMub1:bAvJCYOOvbRPDEgXRc+BA/b1

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks