Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-03_dfb990f38fe6639212bdd7dc21e5e705_cryptolocker

  • Size

    35KB

  • Sample

    240603-em4f4sca48

  • MD5

    dfb990f38fe6639212bdd7dc21e5e705

  • SHA1

    4f191ddeac7fe0173b1f1d3dc668fac6372e1c2d

  • SHA256

    e4fa77f1d9971919a4136097bb94e55422e8a8c056d0db640138bd166ec260ca

  • SHA512

    dffcdc445b5dec2ef16bcc7298af4a85d837a40ba4550fb5351acfc63632b776032250dc132fa08b4c6b1d7d28b56990bbf307858446d598221c883256e4cd07

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp7lB4:bxNrC7kYo1Fxf2rY1BB4

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_dfb990f38fe6639212bdd7dc21e5e705_cryptolocker

    • Size

      35KB

    • MD5

      dfb990f38fe6639212bdd7dc21e5e705

    • SHA1

      4f191ddeac7fe0173b1f1d3dc668fac6372e1c2d

    • SHA256

      e4fa77f1d9971919a4136097bb94e55422e8a8c056d0db640138bd166ec260ca

    • SHA512

      dffcdc445b5dec2ef16bcc7298af4a85d837a40ba4550fb5351acfc63632b776032250dc132fa08b4c6b1d7d28b56990bbf307858446d598221c883256e4cd07

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg9Arbkzos5Pp7lB4:bxNrC7kYo1Fxf2rY1BB4

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks