Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-28_68d6f7bb55a5fb0e3243998c71f248e8_cryptolocker

  • Size

    63KB

  • Sample

    240228-fmtgksbg95

  • MD5

    68d6f7bb55a5fb0e3243998c71f248e8

  • SHA1

    7948a764156e98bb3fdeec277aa940fe4089e64b

  • SHA256

    5bf28eb4450a8dd3f859296d5aeca2645380baa76420cf1b653f71f69d611df5

  • SHA512

    d359772e4669caf9eda108a298b9e7ae1eb8b761477bed47e04a580effc8121cb460665f0855c3e3b5874ed24c308344f1c05372789ec7fa6e5b54a89949e3a9

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScG/:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7m

Score
10/10

Malware Config

Targets

    • Target

      2024-02-28_68d6f7bb55a5fb0e3243998c71f248e8_cryptolocker

    • Size

      63KB

    • MD5

      68d6f7bb55a5fb0e3243998c71f248e8

    • SHA1

      7948a764156e98bb3fdeec277aa940fe4089e64b

    • SHA256

      5bf28eb4450a8dd3f859296d5aeca2645380baa76420cf1b653f71f69d611df5

    • SHA512

      d359772e4669caf9eda108a298b9e7ae1eb8b761477bed47e04a580effc8121cb460665f0855c3e3b5874ed24c308344f1c05372789ec7fa6e5b54a89949e3a9

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScG/:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7m

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks