Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-15_fdeaa196bae5a951e20ecfff1dff17bd_cryptolocker

  • Size

    51KB

  • Sample

    240415-zelljshh4y

  • MD5

    fdeaa196bae5a951e20ecfff1dff17bd

  • SHA1

    fc81e87af664b6aefd6316e7a5f2aac662747ea4

  • SHA256

    a288ab016984d6638bd53effd1000a843b634c873c3095d45ec12b79a5c16b5f

  • SHA512

    dc8d809211e76c3faec73e6cd8b95c1a1a11d8141ad0557ea595b755a88a0268524bf9919cf2986f48fff20697ffb6bff946f1554b97f690b53ccb8076b98d56

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gju:bgGYcA/53GAA6y37Q6dI+d5QGi

Score
10/10

Malware Config

Targets

    • Target

      2024-04-15_fdeaa196bae5a951e20ecfff1dff17bd_cryptolocker

    • Size

      51KB

    • MD5

      fdeaa196bae5a951e20ecfff1dff17bd

    • SHA1

      fc81e87af664b6aefd6316e7a5f2aac662747ea4

    • SHA256

      a288ab016984d6638bd53effd1000a843b634c873c3095d45ec12b79a5c16b5f

    • SHA512

      dc8d809211e76c3faec73e6cd8b95c1a1a11d8141ad0557ea595b755a88a0268524bf9919cf2986f48fff20697ffb6bff946f1554b97f690b53ccb8076b98d56

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dIKld5CS4Gju:bgGYcA/53GAA6y37Q6dI+d5QGi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks