Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-04_4bedb4513d96f50a206e1482450d502e_cryptolocker

  • Size

    37KB

  • Sample

    240604-e8pj3sdh64

  • MD5

    4bedb4513d96f50a206e1482450d502e

  • SHA1

    eee1d4ece1e0e9d13c6a7008d0b33359e4bf7649

  • SHA256

    46a18957a933a933059c16c3688487cc116ae54974a7290c408454c312e66eb3

  • SHA512

    ab96e7ba7fbfe439a268232df034e83229f9e74d30021cbb0db2018a7be60a6e64c559b0f6e84f5d678bee8e0a0fffc3a689d8e377b5ec9d69c6c4671b1e5059

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qvoLUZ61VSl3A:btB9g/WItCSsAGjX7r3BTmUQ1VmC0O

Score
10/10

Malware Config

Targets

    • Target

      2024-06-04_4bedb4513d96f50a206e1482450d502e_cryptolocker

    • Size

      37KB

    • MD5

      4bedb4513d96f50a206e1482450d502e

    • SHA1

      eee1d4ece1e0e9d13c6a7008d0b33359e4bf7649

    • SHA256

      46a18957a933a933059c16c3688487cc116ae54974a7290c408454c312e66eb3

    • SHA512

      ab96e7ba7fbfe439a268232df034e83229f9e74d30021cbb0db2018a7be60a6e64c559b0f6e84f5d678bee8e0a0fffc3a689d8e377b5ec9d69c6c4671b1e5059

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4l8tFFxE2B0qvoLUZ61VSl3A:btB9g/WItCSsAGjX7r3BTmUQ1VmC0O

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks