Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-25_f2cab6464f097950e3fdfaec2a264c02_cryptolocker

  • Size

    29KB

  • Sample

    240325-m4h6hagh2v

  • MD5

    f2cab6464f097950e3fdfaec2a264c02

  • SHA1

    965a31fdee4e6f84941519b797b3c659a9745bd8

  • SHA256

    30134e894fd35895502262110d151a0074c4550b6200fab8eb41ab761ec44453

  • SHA512

    0eed5c194de6355e4d951b1180844441c124abbd2a49a3b60f5dbea2749133c7bb45a8ec655f0e6fc5f6d3041a955d3f79d894b465969d47199b91950e8f7000

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+Ua:b/yC4GyNM01GuQMNXum+v

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_f2cab6464f097950e3fdfaec2a264c02_cryptolocker

    • Size

      29KB

    • MD5

      f2cab6464f097950e3fdfaec2a264c02

    • SHA1

      965a31fdee4e6f84941519b797b3c659a9745bd8

    • SHA256

      30134e894fd35895502262110d151a0074c4550b6200fab8eb41ab761ec44453

    • SHA512

      0eed5c194de6355e4d951b1180844441c124abbd2a49a3b60f5dbea2749133c7bb45a8ec655f0e6fc5f6d3041a955d3f79d894b465969d47199b91950e8f7000

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zznum+Ua:b/yC4GyNM01GuQMNXum+v

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks