Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-19_f383edb1628e2323495f9d347fd81570_cryptolocker

  • Size

    42KB

  • Sample

    240419-darq4sff9v

  • MD5

    f383edb1628e2323495f9d347fd81570

  • SHA1

    6d320dfe25e42a06aa74459a91629ad75d6632b3

  • SHA256

    27ca84e1d2090d4f3f86760f5864913786f073170ee2c53388f24cd88393db94

  • SHA512

    05984db81003c1470f533feb2593ed99db64c614c6ebd6d2a9f5981feee454088fa83d2ec42f0dc0ec599d1b646eb7cd28636219412e57a31580a3f535738e66

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqI:bc/y2lkF0+BeqI

Score
10/10

Malware Config

Targets

    • Target

      2024-04-19_f383edb1628e2323495f9d347fd81570_cryptolocker

    • Size

      42KB

    • MD5

      f383edb1628e2323495f9d347fd81570

    • SHA1

      6d320dfe25e42a06aa74459a91629ad75d6632b3

    • SHA256

      27ca84e1d2090d4f3f86760f5864913786f073170ee2c53388f24cd88393db94

    • SHA512

      05984db81003c1470f533feb2593ed99db64c614c6ebd6d2a9f5981feee454088fa83d2ec42f0dc0ec599d1b646eb7cd28636219412e57a31580a3f535738e66

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphqI:bc/y2lkF0+BeqI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks