Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-08_a5f9718baff1bcbaff5405c28ac8d686_cryptolocker

  • Size

    49KB

  • Sample

    240408-r64bnsbg76

  • MD5

    a5f9718baff1bcbaff5405c28ac8d686

  • SHA1

    4d4a7867fc2eab44c99b987902716b9a0db7b34d

  • SHA256

    19e48c26d9243f90ec6b72462211509a5cf94bd32d7d6e0ea528a1b154fb1724

  • SHA512

    bcdc2eb00fb31e969924ea51e0928de6eb90111a9189205682ca90b9bdfd6faafa8317f85835897febaca7fd926e6953db4bbc97e25b9e49d2f728252bf1fc8d

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvkD98i:bgGYcA/53GAA6y37nby8i

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_a5f9718baff1bcbaff5405c28ac8d686_cryptolocker

    • Size

      49KB

    • MD5

      a5f9718baff1bcbaff5405c28ac8d686

    • SHA1

      4d4a7867fc2eab44c99b987902716b9a0db7b34d

    • SHA256

      19e48c26d9243f90ec6b72462211509a5cf94bd32d7d6e0ea528a1b154fb1724

    • SHA512

      bcdc2eb00fb31e969924ea51e0928de6eb90111a9189205682ca90b9bdfd6faafa8317f85835897febaca7fd926e6953db4bbc97e25b9e49d2f728252bf1fc8d

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37YbDu5z/hvvkD98i:bgGYcA/53GAA6y37nby8i

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks