Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-13_cfb604120e75d3d4688ab822c3c397c7_cryptolocker

  • Size

    64KB

  • Sample

    240213-zf1rvshb3v

  • MD5

    cfb604120e75d3d4688ab822c3c397c7

  • SHA1

    70a704136d3f5e56f407583cd3d1337eab138e3e

  • SHA256

    48c269ab3fe023d4c1ea5245d906ead517170fdd591b8cc698dab72c365f71d8

  • SHA512

    800786bfc0b724f4fa6b3e82507691d20f0bbcbd2fbcf0dcd1302fcdedd70ddedf4b6e4924af175fcb8650eb4a1f3adf50c02c66eb94b3289ddb59774f45b5d9

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbV4N:ZVxkGOtEvwDpjcawo

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_cfb604120e75d3d4688ab822c3c397c7_cryptolocker

    • Size

      64KB

    • MD5

      cfb604120e75d3d4688ab822c3c397c7

    • SHA1

      70a704136d3f5e56f407583cd3d1337eab138e3e

    • SHA256

      48c269ab3fe023d4c1ea5245d906ead517170fdd591b8cc698dab72c365f71d8

    • SHA512

      800786bfc0b724f4fa6b3e82507691d20f0bbcbd2fbcf0dcd1302fcdedd70ddedf4b6e4924af175fcb8650eb4a1f3adf50c02c66eb94b3289ddb59774f45b5d9

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3hvLcbV4N:ZVxkGOtEvwDpjcawo

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks