Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-28_3fefd69d58045de961a247f947030cb6_cryptolocker

  • Size

    37KB

  • Sample

    240528-vfpx5sde87

  • MD5

    3fefd69d58045de961a247f947030cb6

  • SHA1

    fd3609e3c4016f34869b848d5ce3f7471d46cc72

  • SHA256

    4022f934e411331c8f8eafb595b68c77a12e59d218468f6874e66eabcafd8ac8

  • SHA512

    e8a951d029341eec8681e7cc587434b38bc8a04fe03f470a8974f30c1ffb191d18889013ff11ae1ee13d44cba6e894318ac89353d337e2d3ba17ef7909c655db

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSyk:btB9g/WItCSsAGjX7e9N0hunRvk

Score
10/10

Malware Config

Targets

    • Target

      2024-05-28_3fefd69d58045de961a247f947030cb6_cryptolocker

    • Size

      37KB

    • MD5

      3fefd69d58045de961a247f947030cb6

    • SHA1

      fd3609e3c4016f34869b848d5ce3f7471d46cc72

    • SHA256

      4022f934e411331c8f8eafb595b68c77a12e59d218468f6874e66eabcafd8ac8

    • SHA512

      e8a951d029341eec8681e7cc587434b38bc8a04fe03f470a8974f30c1ffb191d18889013ff11ae1ee13d44cba6e894318ac89353d337e2d3ba17ef7909c655db

    • SSDEEP

      384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunRSyk:btB9g/WItCSsAGjX7e9N0hunRvk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks