Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-18_4ffdc9736ffaf21fae185069ae22f840_cryptolocker

  • Size

    60KB

  • Sample

    240418-pr879sdc73

  • MD5

    4ffdc9736ffaf21fae185069ae22f840

  • SHA1

    eb4a42df98c41f41601ce00e43c1e31db749f472

  • SHA256

    ff6c3ba44a85536e14d9a528421d2e512cb159c0102a2d84ad662c063128e678

  • SHA512

    bba849777abe4e85128e3f833528c783c1ae128bfffa98fa0ceb435957647dc2f489ee0c9893daa95f3a2473a73e64a1902adaabdec4818d020b49932ed4d3f1

  • SSDEEP

    768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XGP:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWM

Score
10/10

Malware Config

Targets

    • Target

      2024-04-18_4ffdc9736ffaf21fae185069ae22f840_cryptolocker

    • Size

      60KB

    • MD5

      4ffdc9736ffaf21fae185069ae22f840

    • SHA1

      eb4a42df98c41f41601ce00e43c1e31db749f472

    • SHA256

      ff6c3ba44a85536e14d9a528421d2e512cb159c0102a2d84ad662c063128e678

    • SHA512

      bba849777abe4e85128e3f833528c783c1ae128bfffa98fa0ceb435957647dc2f489ee0c9893daa95f3a2473a73e64a1902adaabdec4818d020b49932ed4d3f1

    • SSDEEP

      768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XGP:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWM

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks