Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-07_f2836e930c592116bbcfaaf30a464b62_cryptolocker

  • Size

    33KB

  • Sample

    240607-b1kdlsge43

  • MD5

    f2836e930c592116bbcfaaf30a464b62

  • SHA1

    5d1c2e9f1c21faefbd257dac71b924508ac04591

  • SHA256

    f9aff73f72733e71781ead4790520750bd2642112ac445eb9feda4366b1f816a

  • SHA512

    9f4205b4f36edb61ebbb09a7cacc8ab14524d7510ac31377106efc944b2b3d8e41af86413f2df1808f8d9e923c5d29f92956a703f330584cdde3e8850f682a33

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7b:bAvJCYOOvbRPDEgXRcJP

Score
10/10

Malware Config

Targets

    • Target

      2024-06-07_f2836e930c592116bbcfaaf30a464b62_cryptolocker

    • Size

      33KB

    • MD5

      f2836e930c592116bbcfaaf30a464b62

    • SHA1

      5d1c2e9f1c21faefbd257dac71b924508ac04591

    • SHA256

      f9aff73f72733e71781ead4790520750bd2642112ac445eb9feda4366b1f816a

    • SHA512

      9f4205b4f36edb61ebbb09a7cacc8ab14524d7510ac31377106efc944b2b3d8e41af86413f2df1808f8d9e923c5d29f92956a703f330584cdde3e8850f682a33

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzo6cJ3v7b:bAvJCYOOvbRPDEgXRcJP

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks