Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-23_fb9a211fba7bc7364a5e0ccd24fcb7eb_cryptolocker

  • Size

    45KB

  • Sample

    240123-wmcf3aefd6

  • MD5

    fb9a211fba7bc7364a5e0ccd24fcb7eb

  • SHA1

    2b7541a8b032fd38453bf36c898cf28642cbe4ba

  • SHA256

    59cb7eb2f2d68a5ec665671969c3315a0af8cabee4032ceccf0db5e28e4782c6

  • SHA512

    42aa7c2c11ef32a0941873561d0e5b3fd1562e1a2b104b3e88c22a3027a5690b898ca0f441fe555d4d42d6f211dedf7c10ab79c4b7e6f97e19e4b384172cd47d

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dE+:bgGYcA/53GAA6y37Q6dJ

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_fb9a211fba7bc7364a5e0ccd24fcb7eb_cryptolocker

    • Size

      45KB

    • MD5

      fb9a211fba7bc7364a5e0ccd24fcb7eb

    • SHA1

      2b7541a8b032fd38453bf36c898cf28642cbe4ba

    • SHA256

      59cb7eb2f2d68a5ec665671969c3315a0af8cabee4032ceccf0db5e28e4782c6

    • SHA512

      42aa7c2c11ef32a0941873561d0e5b3fd1562e1a2b104b3e88c22a3027a5690b898ca0f441fe555d4d42d6f211dedf7c10ab79c4b7e6f97e19e4b384172cd47d

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDlC6JFbK37Yl6dE+:bgGYcA/53GAA6y37Q6dJ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks