Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-24_cfa6f4d8b1a315cfd3dcc6b92aa57cf5_cryptolocker

  • Size

    41KB

  • Sample

    240124-bxx6asehgl

  • MD5

    cfa6f4d8b1a315cfd3dcc6b92aa57cf5

  • SHA1

    4e11b88266bbb7b9eee8d4fd6acdb4d7e819d679

  • SHA256

    f24abadfee98370f14f30266999b90ec7cecf26a524eaf7b5fc066896f5a6fb0

  • SHA512

    e13a81e3af8896704bbf6ea7188f8879ead6b256f2f0fc24a83619cc6b417c9fb7f0c102837baf7bc7142a45112a3db6718a6402ff338c2130d10bf93d241f02

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwovv:bc/y2lm6Y0AqJ51mwovv

Score
10/10

Malware Config

Targets

    • Target

      2024-01-24_cfa6f4d8b1a315cfd3dcc6b92aa57cf5_cryptolocker

    • Size

      41KB

    • MD5

      cfa6f4d8b1a315cfd3dcc6b92aa57cf5

    • SHA1

      4e11b88266bbb7b9eee8d4fd6acdb4d7e819d679

    • SHA256

      f24abadfee98370f14f30266999b90ec7cecf26a524eaf7b5fc066896f5a6fb0

    • SHA512

      e13a81e3af8896704bbf6ea7188f8879ead6b256f2f0fc24a83619cc6b417c9fb7f0c102837baf7bc7142a45112a3db6718a6402ff338c2130d10bf93d241f02

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51mwovv:bc/y2lm6Y0AqJ51mwovv

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks