Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-31_93025753cb3f8f540998709ade0b8361_cryptolocker

  • Size

    62KB

  • Sample

    240531-kdwmssdb75

  • MD5

    93025753cb3f8f540998709ade0b8361

  • SHA1

    8dad78fcf470d1fd8411dfa6494b8d716b55dddb

  • SHA256

    35989d338a724f36f3fff9f61c2366079b2629e131a12c5fe2d8ebf162150663

  • SHA512

    89dd96544627be5331a67929332a90918a779a902b6ce0179e00804b1fc55bcbc9c239ead3e6871d58bdb2e48ff46eaf37b56b390ac189aa98546c90c7a59724

  • SSDEEP

    768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG95:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWI

Score
10/10

Malware Config

Targets

    • Target

      2024-05-31_93025753cb3f8f540998709ade0b8361_cryptolocker

    • Size

      62KB

    • MD5

      93025753cb3f8f540998709ade0b8361

    • SHA1

      8dad78fcf470d1fd8411dfa6494b8d716b55dddb

    • SHA256

      35989d338a724f36f3fff9f61c2366079b2629e131a12c5fe2d8ebf162150663

    • SHA512

      89dd96544627be5331a67929332a90918a779a902b6ce0179e00804b1fc55bcbc9c239ead3e6871d58bdb2e48ff46eaf37b56b390ac189aa98546c90c7a59724

    • SSDEEP

      768:3Uz7yVEhs9+Hs1SQtOOtEvwDpjO9+4hdCY8EQMjpi/Wpi3B3URiLqCyLuAx8XG95:3P+HsMQMOtEvwDpjoHy7B3g9CWuAxWI

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks