Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-26_a6392a45051323be8ac1d00f56b9a0ee_cryptolocker

  • Size

    35KB

  • Sample

    240426-m6gepafa68

  • MD5

    a6392a45051323be8ac1d00f56b9a0ee

  • SHA1

    54ae62354b89d851b3787a8289e20c30d2d05dbb

  • SHA256

    bffe6c94aa1463628f34a050fcd3dda400d594b45acfbbc9ab98975eb79283e8

  • SHA512

    229d56edf198e1194f6d7b4f32e1194dd8f96ecd428b9220d4189eaa46b8f6a732fc417e8f02b8dbdc0963b6c0a5150b55b56f3aa7606b58084697e1a9333119

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNL:bAvJCYOOvbRPDEgXRc+BAILYL

Score
10/10

Malware Config

Targets

    • Target

      2024-04-26_a6392a45051323be8ac1d00f56b9a0ee_cryptolocker

    • Size

      35KB

    • MD5

      a6392a45051323be8ac1d00f56b9a0ee

    • SHA1

      54ae62354b89d851b3787a8289e20c30d2d05dbb

    • SHA256

      bffe6c94aa1463628f34a050fcd3dda400d594b45acfbbc9ab98975eb79283e8

    • SHA512

      229d56edf198e1194f6d7b4f32e1194dd8f96ecd428b9220d4189eaa46b8f6a732fc417e8f02b8dbdc0963b6c0a5150b55b56f3aa7606b58084697e1a9333119

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6ckJp0qAgmEzXKxA+uspNL:bAvJCYOOvbRPDEgXRc+BAILYL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks