Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-01-27_cf41fdc5599af5ae182f4cffdb4f13b2_cryptolocker

  • Size

    35KB

  • Sample

    240127-msjb5accej

  • MD5

    cf41fdc5599af5ae182f4cffdb4f13b2

  • SHA1

    f14d4aca2b22bb09bf54f340e64812159ed4e2d4

  • SHA256

    70888c78029824e1619a68627b1f49a252f9b461292ed7ce00c11533983b7e78

  • SHA512

    ac33b492a040ae3b0777f969a4bc70294dd33f775b234e6ae7bb91b4bbc8b6d53c685604c51f6b7070c59bb47323663e7d78fd7cfd950d2012629a39761ad44c

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPY:YGzl5wjRQBBOsP1QMOtEvwDpjgar9

Score
10/10

Malware Config

Targets

    • Target

      2024-01-27_cf41fdc5599af5ae182f4cffdb4f13b2_cryptolocker

    • Size

      35KB

    • MD5

      cf41fdc5599af5ae182f4cffdb4f13b2

    • SHA1

      f14d4aca2b22bb09bf54f340e64812159ed4e2d4

    • SHA256

      70888c78029824e1619a68627b1f49a252f9b461292ed7ce00c11533983b7e78

    • SHA512

      ac33b492a040ae3b0777f969a4bc70294dd33f775b234e6ae7bb91b4bbc8b6d53c685604c51f6b7070c59bb47323663e7d78fd7cfd950d2012629a39761ad44c

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPY:YGzl5wjRQBBOsP1QMOtEvwDpjgar9

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks