Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-28_af29ba829cfe507cb20d3fe4a6495908_cryptolocker

  • Size

    54KB

  • Sample

    240528-c78kfsbg7x

  • MD5

    af29ba829cfe507cb20d3fe4a6495908

  • SHA1

    d4c109f8cd092b15d1079f3752c78464fb9e412e

  • SHA256

    03f3cdce05a4cffd51cd1e2693e0bc73050db55f83670d8af52293c9bbe651a0

  • SHA512

    aeb859538207d1dcbbe8045d48c9bb0d6ec10a7d6b27b8fe58769f3a6f35550e8848bc912d78e2c9ffc210763c1bdb67f0a2c965e7fedb7853cd9d818abca6c6

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6Ex:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7I

Score
10/10

Malware Config

Targets

    • Target

      2024-05-28_af29ba829cfe507cb20d3fe4a6495908_cryptolocker

    • Size

      54KB

    • MD5

      af29ba829cfe507cb20d3fe4a6495908

    • SHA1

      d4c109f8cd092b15d1079f3752c78464fb9e412e

    • SHA256

      03f3cdce05a4cffd51cd1e2693e0bc73050db55f83670d8af52293c9bbe651a0

    • SHA512

      aeb859538207d1dcbbe8045d48c9bb0d6ec10a7d6b27b8fe58769f3a6f35550e8848bc912d78e2c9ffc210763c1bdb67f0a2c965e7fedb7853cd9d818abca6c6

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1xzpAIX6Ex:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7I

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks