Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-14_2bb8c8251087c048c44db52388231ec3_cryptolocker

  • Size

    42KB

  • Sample

    240214-q41x4acc3t

  • MD5

    2bb8c8251087c048c44db52388231ec3

  • SHA1

    3301f452da8c69f174dcf6a6948ee16dc619dccf

  • SHA256

    269603cce2007cc6989894bf6d160e8f25ed12965800634e6c27bbc9c04fe735

  • SHA512

    a5ef66035f2b735d25ec4832aab98f35b27235ae7f257d886389ef8220ae23ab3184966e28a241cf714031cc2d2ac0caafd9e98fa864d73499baf4da00cfb1ad

  • SSDEEP

    768:btB9g/WItCSsAGjX7r3BPOMHoc/QQ/hGGtPVRfj:btB9g/xtCSKfxLIc//hGGtbL

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_2bb8c8251087c048c44db52388231ec3_cryptolocker

    • Size

      42KB

    • MD5

      2bb8c8251087c048c44db52388231ec3

    • SHA1

      3301f452da8c69f174dcf6a6948ee16dc619dccf

    • SHA256

      269603cce2007cc6989894bf6d160e8f25ed12965800634e6c27bbc9c04fe735

    • SHA512

      a5ef66035f2b735d25ec4832aab98f35b27235ae7f257d886389ef8220ae23ab3184966e28a241cf714031cc2d2ac0caafd9e98fa864d73499baf4da00cfb1ad

    • SSDEEP

      768:btB9g/WItCSsAGjX7r3BPOMHoc/QQ/hGGtPVRfj:btB9g/xtCSKfxLIc//hGGtbL

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks