Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-14_074973ab684dd7d268052ccd0cf5d5fd_cryptolocker

  • Size

    34KB

  • Sample

    240214-w1kplahg3y

  • MD5

    074973ab684dd7d268052ccd0cf5d5fd

  • SHA1

    f344c6ccc51274fc5511030f009bbff2b6e00007

  • SHA256

    9fba7ec6eb3de5b1488e2d5765c4a30cc785fb6d41ba1d8576f11c9cec7c5e52

  • SHA512

    817e49cd4ce1058604637b3f95046d33f80e01d01b1b32a72da040f03ee714ff2aabc0252cd09975f630a6a9652bf0da7fd16281ad49d3d6e7352d57349154d1

  • SSDEEP

    384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVfi:bA74zYcgT/Ekd0ryfjPIunYwdi

Score
10/10

Malware Config

Targets

    • Target

      2024-02-14_074973ab684dd7d268052ccd0cf5d5fd_cryptolocker

    • Size

      34KB

    • MD5

      074973ab684dd7d268052ccd0cf5d5fd

    • SHA1

      f344c6ccc51274fc5511030f009bbff2b6e00007

    • SHA256

      9fba7ec6eb3de5b1488e2d5765c4a30cc785fb6d41ba1d8576f11c9cec7c5e52

    • SHA512

      817e49cd4ce1058604637b3f95046d33f80e01d01b1b32a72da040f03ee714ff2aabc0252cd09975f630a6a9652bf0da7fd16281ad49d3d6e7352d57349154d1

    • SSDEEP

      384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunexRlSrxVfi:bA74zYcgT/Ekd0ryfjPIunYwdi

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks