Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-23_f628f609479bd993f732fd8b2df2922f_cryptolocker

  • Size

    34KB

  • Sample

    240223-kpztlaee37

  • MD5

    f628f609479bd993f732fd8b2df2922f

  • SHA1

    4b0e452de6224f6267e2e503bb9fcde0d9c095bd

  • SHA256

    a138f97df51916083b0537cbf5f38edcb71d2a7d5bc78c861fab671779240347

  • SHA512

    b5349dccd07e60eb7bc017fab130b2c89dc7df9a9f5941e2494a47a4c95e83fc29d2c96466651fce96576a1aaf9b81b32c6fde9becb54cb7a662c033c23e7361

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVM:bA74zYcgT/Ekd0ryfjPIunYwK

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_f628f609479bd993f732fd8b2df2922f_cryptolocker

    • Size

      34KB

    • MD5

      f628f609479bd993f732fd8b2df2922f

    • SHA1

      4b0e452de6224f6267e2e503bb9fcde0d9c095bd

    • SHA256

      a138f97df51916083b0537cbf5f38edcb71d2a7d5bc78c861fab671779240347

    • SHA512

      b5349dccd07e60eb7bc017fab130b2c89dc7df9a9f5941e2494a47a4c95e83fc29d2c96466651fce96576a1aaf9b81b32c6fde9becb54cb7a662c033c23e7361

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVM:bA74zYcgT/Ekd0ryfjPIunYwK

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks