Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-25_dd9e724c63586ed3361509b99b729f32_cryptolocker

  • Size

    49KB

  • Sample

    240125-za7yzsfgdk

  • MD5

    dd9e724c63586ed3361509b99b729f32

  • SHA1

    4f487b48311a0418f86271a6a6a6da37b3331493

  • SHA256

    f5390a74e177913a209825420a7e033f3a9a5a3171346ea97e4f507a3c2a14d7

  • SHA512

    9a33c4d279fd50308f2f126e92f5b5ad3debd132748235378f16d97dda5a25daecda9d89d59bb10b87f3e5e2213f7867528e88d39eec7614b16c9d2c1ade16c3

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQa8U:X6QFElP6n+gJBMOtEvwDpjBtE1y9

Score
10/10

Malware Config

Targets

    • Target

      2024-01-25_dd9e724c63586ed3361509b99b729f32_cryptolocker

    • Size

      49KB

    • MD5

      dd9e724c63586ed3361509b99b729f32

    • SHA1

      4f487b48311a0418f86271a6a6a6da37b3331493

    • SHA256

      f5390a74e177913a209825420a7e033f3a9a5a3171346ea97e4f507a3c2a14d7

    • SHA512

      9a33c4d279fd50308f2f126e92f5b5ad3debd132748235378f16d97dda5a25daecda9d89d59bb10b87f3e5e2213f7867528e88d39eec7614b16c9d2c1ade16c3

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/BtOOtEvwDpjBVaD3E09vaTiSfQa8U:X6QFElP6n+gJBMOtEvwDpjBtE1y9

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks