Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.2023-09-27_5b710213f554648a861addf5291ee034_cryptolocker.exe

  • Size

    35KB

  • Sample

    231106-y3b7caed2w

  • MD5

    5b710213f554648a861addf5291ee034

  • SHA1

    10232956316337a4556722dcf98604e1890dddc1

  • SHA256

    5a3620ac8703aade34d8a0581cbce0e3c8b30c38a06f725e079c3051b512cabd

  • SHA512

    dc9ed517353393c667f4c0216c9c39addf7217ec7ccf3d39112a1b0aa09f901483aed2fa15ccac1c78311ba46f1411030ccca98f4810e41985e8d6728b587a99

  • SSDEEP

    384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5c/sl3:bgX4zYcgTEu6QOaryfjqDDw3sCu5Usl3

Score
7/10

Malware Config

Targets

    • Target

      NEAS.2023-09-27_5b710213f554648a861addf5291ee034_cryptolocker.exe

    • Size

      35KB

    • MD5

      5b710213f554648a861addf5291ee034

    • SHA1

      10232956316337a4556722dcf98604e1890dddc1

    • SHA256

      5a3620ac8703aade34d8a0581cbce0e3c8b30c38a06f725e079c3051b512cabd

    • SHA512

      dc9ed517353393c667f4c0216c9c39addf7217ec7ccf3d39112a1b0aa09f901483aed2fa15ccac1c78311ba46f1411030ccca98f4810e41985e8d6728b587a99

    • SSDEEP

      384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5c/sl3:bgX4zYcgTEu6QOaryfjqDDw3sCu5Usl3

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks