Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-31_00604eab06bbcf13d48fde0f1e077f06_cryptolocker

  • Size

    34KB

  • Sample

    240531-x4cntsbb68

  • MD5

    00604eab06bbcf13d48fde0f1e077f06

  • SHA1

    d1c4bf289e15e79906e56ffcf78c052c4261b2ce

  • SHA256

    1dd9c941ed87b9973a1061f4605a9893b822fa7265ca54eb3f4a27e9dd276d24

  • SHA512

    ac48ca90af3be01c75a69bf1dcb57d3bd6f1e766d0ee24ea4dfff22f9f145abbbef446dcd5d4ae483fce22f7280bd89e7fc4cbf106f388442591563657bd5d14

  • SSDEEP

    384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcsgqDx+:b/yC4GyNM01GuQMNXw2PSjSKkcJe+

Score
10/10

Malware Config

Targets

    • Target

      2024-05-31_00604eab06bbcf13d48fde0f1e077f06_cryptolocker

    • Size

      34KB

    • MD5

      00604eab06bbcf13d48fde0f1e077f06

    • SHA1

      d1c4bf289e15e79906e56ffcf78c052c4261b2ce

    • SHA256

      1dd9c941ed87b9973a1061f4605a9893b822fa7265ca54eb3f4a27e9dd276d24

    • SHA512

      ac48ca90af3be01c75a69bf1dcb57d3bd6f1e766d0ee24ea4dfff22f9f145abbbef446dcd5d4ae483fce22f7280bd89e7fc4cbf106f388442591563657bd5d14

    • SSDEEP

      384:bM7Q0pjC4GybxMv01d3AcASBQMf6i/zzzcYgUPSznStEkcsgqDx+:b/yC4GyNM01GuQMNXw2PSjSKkcJe+

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks