Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-17_f3733c7ebb11071cefe1b2f8ded46ce7_cryptolocker

  • Size

    29KB

  • Sample

    240217-24rj7scb48

  • MD5

    f3733c7ebb11071cefe1b2f8ded46ce7

  • SHA1

    dd89c3b4206915638023f8289b0cba0b46d8d94d

  • SHA256

    4e2ab533ada5b546b555b4be78f17c8e6644349465cc9839ecd66fc5292beffc

  • SHA512

    27a30f680bcd61f57dd591d5cba04aacdaf7d933fc47a7008d7128f89f5b8695ba8aa01ab0502ef0d52a4757cfc6151e7def5b1eb9bb227cfe4abcf0f19908d8

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5STVnTl:bA74zYcgT/Ekd0ryfjQRSnWVTl

Score
10/10

Malware Config

Targets

    • Target

      2024-02-17_f3733c7ebb11071cefe1b2f8ded46ce7_cryptolocker

    • Size

      29KB

    • MD5

      f3733c7ebb11071cefe1b2f8ded46ce7

    • SHA1

      dd89c3b4206915638023f8289b0cba0b46d8d94d

    • SHA256

      4e2ab533ada5b546b555b4be78f17c8e6644349465cc9839ecd66fc5292beffc

    • SHA512

      27a30f680bcd61f57dd591d5cba04aacdaf7d933fc47a7008d7128f89f5b8695ba8aa01ab0502ef0d52a4757cfc6151e7def5b1eb9bb227cfe4abcf0f19908d8

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJ5STVnTl:bA74zYcgT/Ekd0ryfjQRSnWVTl

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks