Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-21_a12921d308299ee90fc96a9420757e0a_cryptolocker

  • Size

    69KB

  • Sample

    240421-fjav3aca6y

  • MD5

    a12921d308299ee90fc96a9420757e0a

  • SHA1

    0f25743e2e6e9bae3fb92acbfa34534e03ecf9dc

  • SHA256

    3a4f2d6ffcb992cad08ce6176d1e71b2ad608cbefcb4931862ae1fd94dc028d5

  • SHA512

    ad87aa41bc20fef69fd902cad67fb97bef2b46c5159f40ad9343a83b245da490008e0306ec5b086700dc2037021f4b27a30466d9e9097e349df27dbed4039ce6

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU50g:DW60sllyWOtEvwDpjwF85b

Score
10/10

Malware Config

Targets

    • Target

      2024-04-21_a12921d308299ee90fc96a9420757e0a_cryptolocker

    • Size

      69KB

    • MD5

      a12921d308299ee90fc96a9420757e0a

    • SHA1

      0f25743e2e6e9bae3fb92acbfa34534e03ecf9dc

    • SHA256

      3a4f2d6ffcb992cad08ce6176d1e71b2ad608cbefcb4931862ae1fd94dc028d5

    • SHA512

      ad87aa41bc20fef69fd902cad67fb97bef2b46c5159f40ad9343a83b245da490008e0306ec5b086700dc2037021f4b27a30466d9e9097e349df27dbed4039ce6

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKU50g:DW60sllyWOtEvwDpjwF85b

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks