Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-10_f3a8a48bf0bc62225622ef1f3963986f_cryptolocker

  • Size

    61KB

  • Sample

    240510-rzfl2aeb42

  • MD5

    f3a8a48bf0bc62225622ef1f3963986f

  • SHA1

    52e03fa3abc34c815f5c8062eb3b742d746472ca

  • SHA256

    da38b5551d4dd8b0d1acc749ee97a5c4a680fe21a449cb616793d81c0470aad7

  • SHA512

    a0c1032750e961fa6fddbc20c16ff1a857384cc1cdb042fda061730faef2f2692b0813b08869189b8dc15924276ebd16d7a771356b466cb1a6b96789bfd90ac5

  • SSDEEP

    768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9+:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWz

Score
10/10

Malware Config

Targets

    • Target

      2024-05-10_f3a8a48bf0bc62225622ef1f3963986f_cryptolocker

    • Size

      61KB

    • MD5

      f3a8a48bf0bc62225622ef1f3963986f

    • SHA1

      52e03fa3abc34c815f5c8062eb3b742d746472ca

    • SHA256

      da38b5551d4dd8b0d1acc749ee97a5c4a680fe21a449cb616793d81c0470aad7

    • SHA512

      a0c1032750e961fa6fddbc20c16ff1a857384cc1cdb042fda061730faef2f2692b0813b08869189b8dc15924276ebd16d7a771356b466cb1a6b96789bfd90ac5

    • SSDEEP

      768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG9+:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWz

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks