Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-02_0cdcea499cbc4213d03d417c9b7c3b63_cryptolocker

  • Size

    32KB

  • Sample

    240602-ezdffsbd55

  • MD5

    0cdcea499cbc4213d03d417c9b7c3b63

  • SHA1

    b93f68693724f41a1fbef06fa3dceefa933eb2ac

  • SHA256

    2e7dbd7dedf740e6c56433556a8020ba6240ea083a1b4bee13d90be2f520d683

  • SHA512

    5e7256059c283fa8f33f819aabcd5b39acb25f200d6af7e5a68a77131201e6232a5b2da9036d43a372605f5931bf0de302029310ae4d97ab9823bc02e9d69210

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7y:bAvJCYOOvbRPDEgXRcJu

Score
10/10

Malware Config

Targets

    • Target

      2024-06-02_0cdcea499cbc4213d03d417c9b7c3b63_cryptolocker

    • Size

      32KB

    • MD5

      0cdcea499cbc4213d03d417c9b7c3b63

    • SHA1

      b93f68693724f41a1fbef06fa3dceefa933eb2ac

    • SHA256

      2e7dbd7dedf740e6c56433556a8020ba6240ea083a1b4bee13d90be2f520d683

    • SHA512

      5e7256059c283fa8f33f819aabcd5b39acb25f200d6af7e5a68a77131201e6232a5b2da9036d43a372605f5931bf0de302029310ae4d97ab9823bc02e9d69210

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7y:bAvJCYOOvbRPDEgXRcJu

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks