Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-23_34ef8733b236b06e8de4b2ff8c08d7ca_cryptolocker

  • Size

    32KB

  • Sample

    240423-jblt5see32

  • MD5

    34ef8733b236b06e8de4b2ff8c08d7ca

  • SHA1

    59146cb3de71158f80366e523bc12e2e7ea5396d

  • SHA256

    613e0e7335f697c0b7c910e1fdc4cd436104c2bfa5d7d75fa225e0cc5758bf3e

  • SHA512

    87cc5d98c33a595e042a446c70ea92be482730b86f642f796168c83844b9c0af45e2aff2fae82f3a83cf2c4ce6e8ded3928d2c1f2b790adbdf908a981075babd

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcs8v:b/yC4GyNM01GuQMNXw2PSjSKkc9v

Score
10/10

Malware Config

Targets

    • Target

      2024-04-23_34ef8733b236b06e8de4b2ff8c08d7ca_cryptolocker

    • Size

      32KB

    • MD5

      34ef8733b236b06e8de4b2ff8c08d7ca

    • SHA1

      59146cb3de71158f80366e523bc12e2e7ea5396d

    • SHA256

      613e0e7335f697c0b7c910e1fdc4cd436104c2bfa5d7d75fa225e0cc5758bf3e

    • SHA512

      87cc5d98c33a595e042a446c70ea92be482730b86f642f796168c83844b9c0af45e2aff2fae82f3a83cf2c4ce6e8ded3928d2c1f2b790adbdf908a981075babd

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcs8v:b/yC4GyNM01GuQMNXw2PSjSKkc9v

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks