Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-28_3f4fbfb68c1b1f41297e1d3d1e955f8b_cryptolocker

  • Size

    36KB

  • Sample

    240528-cy9q6acf48

  • MD5

    3f4fbfb68c1b1f41297e1d3d1e955f8b

  • SHA1

    2365f9c1b5bee12215b0bf3164659ed98ddeff6f

  • SHA256

    df5191468ff60ba4657cbcd085e557700cc9bd830a002c3a071bb5b2064031ca

  • SHA512

    9b7fded80b26fb51f7008307b535c504a5825801a32baa75d9b96f548fab32fef25dea5fdf08eee703a8b5f05817f48bb4c47ca573545cd0e9741358778f5bdb

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZgH/:bA74zYcgT/Ekd0ryfjPIunqpeNswm6c

Score
10/10

Malware Config

Targets

    • Target

      2024-05-28_3f4fbfb68c1b1f41297e1d3d1e955f8b_cryptolocker

    • Size

      36KB

    • MD5

      3f4fbfb68c1b1f41297e1d3d1e955f8b

    • SHA1

      2365f9c1b5bee12215b0bf3164659ed98ddeff6f

    • SHA256

      df5191468ff60ba4657cbcd085e557700cc9bd830a002c3a071bb5b2064031ca

    • SHA512

      9b7fded80b26fb51f7008307b535c504a5825801a32baa75d9b96f548fab32fef25dea5fdf08eee703a8b5f05817f48bb4c47ca573545cd0e9741358778f5bdb

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lxZgH/:bA74zYcgT/Ekd0ryfjPIunqpeNswm6c

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks