Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-11_efada5c6e1d8103d7a98ff6fda39bfa6_cryptolocker

  • Size

    36KB

  • Sample

    240411-js35rafb92

  • MD5

    efada5c6e1d8103d7a98ff6fda39bfa6

  • SHA1

    a5c760d4739bd3c8168828c536c746c88d6e8f83

  • SHA256

    fbc74f3416e98e68b138547ce502a206450232b0febd895a2bf592675d9d2e39

  • SHA512

    f70bfcc730cad377a2b51b7019c2559f936db9e2a1e01cc7d6035a7d1ba4427dba327ac499ca9352c935a3c59562b7bfd1a7a9dc3919d5af3814c7c5611c9880

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lmRgy:bA74zYcgT/Ekd0ryfjPIunqpeNswm9my

Score
10/10

Malware Config

Targets

    • Target

      2024-04-11_efada5c6e1d8103d7a98ff6fda39bfa6_cryptolocker

    • Size

      36KB

    • MD5

      efada5c6e1d8103d7a98ff6fda39bfa6

    • SHA1

      a5c760d4739bd3c8168828c536c746c88d6e8f83

    • SHA256

      fbc74f3416e98e68b138547ce502a206450232b0febd895a2bf592675d9d2e39

    • SHA512

      f70bfcc730cad377a2b51b7019c2559f936db9e2a1e01cc7d6035a7d1ba4427dba327ac499ca9352c935a3c59562b7bfd1a7a9dc3919d5af3814c7c5611c9880

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lmRgy:bA74zYcgT/Ekd0ryfjPIunqpeNswm9my

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks