Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-29_0a4e9e5a6cf5ad2353c56f114e99f498_cryptolocker

  • Size

    49KB

  • Sample

    240529-nlhbxsdf74

  • MD5

    0a4e9e5a6cf5ad2353c56f114e99f498

  • SHA1

    439c03f5a11d54574d3992c0bfe094e737400fc3

  • SHA256

    77bb38ce3b777f927585e67b8b3db04fdfcb4cbf92977a284615a6580f26ed6a

  • SHA512

    aeab069cf45858ec94c20ef3821891abffb8fd8bbb73007b00630fa4af0622ae5c0372ae952593cc9c1031665ddac363d0ee38606ed7c99c8a79d14ad9768ea5

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+0:bIDOw9a0Dwo3P1ojvUSD4PInyDJ

Score
10/10

Malware Config

Targets

    • Target

      2024-05-29_0a4e9e5a6cf5ad2353c56f114e99f498_cryptolocker

    • Size

      49KB

    • MD5

      0a4e9e5a6cf5ad2353c56f114e99f498

    • SHA1

      439c03f5a11d54574d3992c0bfe094e737400fc3

    • SHA256

      77bb38ce3b777f927585e67b8b3db04fdfcb4cbf92977a284615a6580f26ed6a

    • SHA512

      aeab069cf45858ec94c20ef3821891abffb8fd8bbb73007b00630fa4af0622ae5c0372ae952593cc9c1031665ddac363d0ee38606ed7c99c8a79d14ad9768ea5

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6D8jnPx9UnuDLlD+0:bIDOw9a0Dwo3P1ojvUSD4PInyDJ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks