Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-04_bdc308c547feeaa55cfc2c912f7331c2_cryptolocker

  • Size

    37KB

  • Sample

    240504-tjeqxade99

  • MD5

    bdc308c547feeaa55cfc2c912f7331c2

  • SHA1

    dcc3f914fa61d57856cfb71a3ed35836830837f8

  • SHA256

    c36eb5b4f24c65bce2684cd6b8837439a70f08c209afab784d8bfa91a7f937a0

  • SHA512

    0b9b5c37403f0150ae3729e618b938aeb7eb4cf57ddc0250e599f398d622bdd0fa19a80c722bb6462b2de0405ecbc1a6d9274a1ec6cdbccab9daee3ba76155fd

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz960SPluhn:bAvJCYOOvbRPDEgXRc3SSz3SPS

Score
10/10

Malware Config

Targets

    • Target

      2024-05-04_bdc308c547feeaa55cfc2c912f7331c2_cryptolocker

    • Size

      37KB

    • MD5

      bdc308c547feeaa55cfc2c912f7331c2

    • SHA1

      dcc3f914fa61d57856cfb71a3ed35836830837f8

    • SHA256

      c36eb5b4f24c65bce2684cd6b8837439a70f08c209afab784d8bfa91a7f937a0

    • SHA512

      0b9b5c37403f0150ae3729e618b938aeb7eb4cf57ddc0250e599f398d622bdd0fa19a80c722bb6462b2de0405ecbc1a6d9274a1ec6cdbccab9daee3ba76155fd

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6c3l8Sz960SPluhn:bAvJCYOOvbRPDEgXRc3SSz3SPS

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks