Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-23_dc87bf83284ad9c7c89ad44949eeb0c6_cryptolocker

  • Size

    51KB

  • Sample

    240123-ylfhfagdcl

  • MD5

    dc87bf83284ad9c7c89ad44949eeb0c6

  • SHA1

    d0382d96c3154ae58e7c974103da6c297a4d14d5

  • SHA256

    7e32fd6bed6bc14176e45afed1fc9a50705e23c4dfbe03c499712e7bd64e20d1

  • SHA512

    47cf009c7f8d79b2105a7252f2e6eaccfc4b24f95699c724ae16509c3e9ebd611831b326c59c5f8ead76cb1dc171b913db012fc0e0dd1e683e46d79829c482b8

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9SVu:bIDOw9a0DwitDZz1w

Score
10/10

Malware Config

Targets

    • Target

      2024-01-23_dc87bf83284ad9c7c89ad44949eeb0c6_cryptolocker

    • Size

      51KB

    • MD5

      dc87bf83284ad9c7c89ad44949eeb0c6

    • SHA1

      d0382d96c3154ae58e7c974103da6c297a4d14d5

    • SHA256

      7e32fd6bed6bc14176e45afed1fc9a50705e23c4dfbe03c499712e7bd64e20d1

    • SHA512

      47cf009c7f8d79b2105a7252f2e6eaccfc4b24f95699c724ae16509c3e9ebd611831b326c59c5f8ead76cb1dc171b913db012fc0e0dd1e683e46d79829c482b8

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9SVu:bIDOw9a0DwitDZz1w

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks