Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-29_de2a4399d0bafbd71779d03c292585ea_cryptolocker

  • Size

    38KB

  • Sample

    240529-zfx1zaaa37

  • MD5

    de2a4399d0bafbd71779d03c292585ea

  • SHA1

    914a3424ab2ca72670ec0a2931299f7c109f49e8

  • SHA256

    2dbca7c12590251ffac8b9ee9d3b2f247b71a6aa6bb3c48aa2f4ff0f7824e627

  • SHA512

    6a15cd39ffd9976290aafbfcb5a82ff2d9516eb8ad019dec42ea23adfab60e9a6171a61b619776475023b86845cdff6657ca34c34292bfe59f5c11e782659370

  • SSDEEP

    768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZy5:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xn

Score
10/10

Malware Config

Targets

    • Target

      2024-05-29_de2a4399d0bafbd71779d03c292585ea_cryptolocker

    • Size

      38KB

    • MD5

      de2a4399d0bafbd71779d03c292585ea

    • SHA1

      914a3424ab2ca72670ec0a2931299f7c109f49e8

    • SHA256

      2dbca7c12590251ffac8b9ee9d3b2f247b71a6aa6bb3c48aa2f4ff0f7824e627

    • SHA512

      6a15cd39ffd9976290aafbfcb5a82ff2d9516eb8ad019dec42ea23adfab60e9a6171a61b619776475023b86845cdff6657ca34c34292bfe59f5c11e782659370

    • SSDEEP

      768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGp/YIm7wm0WZy5:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xn

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks