Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-30_4932bb0b3097cdc77901dc9aa8248f5c_cryptolocker

  • Size

    45KB

  • Sample

    240430-fc6zxscf63

  • MD5

    4932bb0b3097cdc77901dc9aa8248f5c

  • SHA1

    39797b9fb7b79a25d276e2ad0a9e92413785d880

  • SHA256

    0e131ed6555068513035088fd0a25944f2f0daec2428b40f9cdfda232dc718d9

  • SHA512

    c4b35bef38059ae9e12fdc84628d282f4269b819378cbfaba8131ad687ad9c4bdbf60341f567f9035d40df2a6638e106f8f45a2c9566d0f3f0121b6cf47e10fa

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsE:V6QFElP6n+gMQMOtEvwDpjyaYaFAh33

Score
10/10

Malware Config

Targets

    • Target

      2024-04-30_4932bb0b3097cdc77901dc9aa8248f5c_cryptolocker

    • Size

      45KB

    • MD5

      4932bb0b3097cdc77901dc9aa8248f5c

    • SHA1

      39797b9fb7b79a25d276e2ad0a9e92413785d880

    • SHA256

      0e131ed6555068513035088fd0a25944f2f0daec2428b40f9cdfda232dc718d9

    • SHA512

      c4b35bef38059ae9e12fdc84628d282f4269b819378cbfaba8131ad687ad9c4bdbf60341f567f9035d40df2a6638e106f8f45a2c9566d0f3f0121b6cf47e10fa

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzfm0EXsE:V6QFElP6n+gMQMOtEvwDpjyaYaFAh33

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks