Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-23_8df6b4eb06cd6ff9a1d9f6bcf1afb9c2_cryptolocker

  • Size

    38KB

  • Sample

    240223-p13rvaga31

  • MD5

    8df6b4eb06cd6ff9a1d9f6bcf1afb9c2

  • SHA1

    12635e7e57d1776dfca0917a2cad3f4033637fe7

  • SHA256

    d3c519a9d24fdf5825c951a7cc02118b56ce5d617e2e9e954b502ecb59125f77

  • SHA512

    75fbd25adc22dc7ad6d79f3f30a47579770d7820de0bd6e2ab5c1829fc7fb947e45eace013dd8d43f6ab7d677ed0e29346f780a9e7623f4bf2842db03975f3f7

  • SSDEEP

    384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0Qk:bAvJCYOOvbRPDEgXrNekd7l94i3pF0x

Score
10/10

Malware Config

Targets

    • Target

      2024-02-23_8df6b4eb06cd6ff9a1d9f6bcf1afb9c2_cryptolocker

    • Size

      38KB

    • MD5

      8df6b4eb06cd6ff9a1d9f6bcf1afb9c2

    • SHA1

      12635e7e57d1776dfca0917a2cad3f4033637fe7

    • SHA256

      d3c519a9d24fdf5825c951a7cc02118b56ce5d617e2e9e954b502ecb59125f77

    • SHA512

      75fbd25adc22dc7ad6d79f3f30a47579770d7820de0bd6e2ab5c1829fc7fb947e45eace013dd8d43f6ab7d677ed0e29346f780a9e7623f4bf2842db03975f3f7

    • SSDEEP

      384:bAvMaNGh4z7CG3POOvbRSLoF/F0QU5XYFnufc/zzoiM8Nekdvjl9V50i3NbF0Qk:bAvJCYOOvbRPDEgXrNekd7l94i3pF0x

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks