Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-18_6891c507c6fee69ba24013da74ca3e8a_cryptolocker

  • Size

    44KB

  • Sample

    240218-t6ednacg54

  • MD5

    6891c507c6fee69ba24013da74ca3e8a

  • SHA1

    1c54aa2c4b086d74485040e5ff5e98f22b61bb82

  • SHA256

    e8708fdd2bfc4d75b3ce0739876709a127dd2402ee29ed30728be14808f41c6a

  • SHA512

    77077b758595826b0ffec5364cb773f38d5670aa87e9d96aed41997c2faf07b9c2d7ffbd2d4892db48bfc8e603cf9a232505392590eb496320b1cce00df939cf

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphedq:bc/y2lkF0+BeJ

Score
10/10

Malware Config

Targets

    • Target

      2024-02-18_6891c507c6fee69ba24013da74ca3e8a_cryptolocker

    • Size

      44KB

    • MD5

      6891c507c6fee69ba24013da74ca3e8a

    • SHA1

      1c54aa2c4b086d74485040e5ff5e98f22b61bb82

    • SHA256

      e8708fdd2bfc4d75b3ce0739876709a127dd2402ee29ed30728be14808f41c6a

    • SHA512

      77077b758595826b0ffec5364cb773f38d5670aa87e9d96aed41997c2faf07b9c2d7ffbd2d4892db48bfc8e603cf9a232505392590eb496320b1cce00df939cf

    • SSDEEP

      768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMphedq:bc/y2lkF0+BeJ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks