Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-26_f13461eca4f8ab8d57209349123049f1_cryptolocker

  • Size

    41KB

  • Sample

    240526-dadt9ach93

  • MD5

    f13461eca4f8ab8d57209349123049f1

  • SHA1

    d1d9c873e904bde081f73f41fa76ff6a2afdf6b0

  • SHA256

    9e80458fb07a6188db29019dbf2de00e8aed4f8db50916d5a5c027448a1d5f1b

  • SHA512

    ab750ab4e1c1bf8a703500b36ff0a49390636fa86ec68364a7c22ddd5154f348ae7635f856acaabd684d6efe7633bb30871cd9b910e1c806e2ae9e298b75ed02

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/EZCz:btB9g/WItCSsAGjX7e9N0hunKLYW+

Score
10/10

Malware Config

Targets

    • Target

      2024-05-26_f13461eca4f8ab8d57209349123049f1_cryptolocker

    • Size

      41KB

    • MD5

      f13461eca4f8ab8d57209349123049f1

    • SHA1

      d1d9c873e904bde081f73f41fa76ff6a2afdf6b0

    • SHA256

      9e80458fb07a6188db29019dbf2de00e8aed4f8db50916d5a5c027448a1d5f1b

    • SHA512

      ab750ab4e1c1bf8a703500b36ff0a49390636fa86ec68364a7c22ddd5154f348ae7635f856acaabd684d6efe7633bb30871cd9b910e1c806e2ae9e298b75ed02

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunKzH15U/EZCz:btB9g/WItCSsAGjX7e9N0hunKLYW+

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks