Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-13_5b04b3c707c96fd645e2eb294ed88cd1_cryptolocker

  • Size

    94KB

  • Sample

    240213-py7ysabc66

  • MD5

    5b04b3c707c96fd645e2eb294ed88cd1

  • SHA1

    4515c6b9c98999aecba122377b0c151a8a38a025

  • SHA256

    f25f12098ab431c5191bf168daa27265710f8cbcdd807c6f95fed4dd622dbb6a

  • SHA512

    9d889d1d51ff9d43e0c119eb371630b68410ee41c6c7ae8d9d06792a2115bf582ec0e36f380074e7c2f20cd80e6c56cb02f78ec0376eef5f4ec9aaaef3d36bff

  • SSDEEP

    1536:Z6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNC4w2w:Z6a+pOtEvwDpjtzk

Score
10/10

Malware Config

Targets

    • Target

      2024-02-13_5b04b3c707c96fd645e2eb294ed88cd1_cryptolocker

    • Size

      94KB

    • MD5

      5b04b3c707c96fd645e2eb294ed88cd1

    • SHA1

      4515c6b9c98999aecba122377b0c151a8a38a025

    • SHA256

      f25f12098ab431c5191bf168daa27265710f8cbcdd807c6f95fed4dd622dbb6a

    • SHA512

      9d889d1d51ff9d43e0c119eb371630b68410ee41c6c7ae8d9d06792a2115bf582ec0e36f380074e7c2f20cd80e6c56cb02f78ec0376eef5f4ec9aaaef3d36bff

    • SSDEEP

      1536:Z6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwNC4w2w:Z6a+pOtEvwDpjtzk

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks