Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-24_9acb49fe86451eee800d1af5d043fe57_cryptolocker

  • Size

    60KB

  • Sample

    240224-c4txwsff2x

  • MD5

    9acb49fe86451eee800d1af5d043fe57

  • SHA1

    4a531edb027a942f0658b2f902f21e0a558f13ff

  • SHA256

    067309e3216a38cbb4456b1c5fd79e96bd4681ea0e79908e54368293a9ecb9dc

  • SHA512

    02a44972b4f6fa0055c5890c5dc1975d465f5f26debd4716e39dcabeb086dc06940d43e15821c6554442615d7adc69a52f6a2bdae45ae79396fc3d99bbef8422

  • SSDEEP

    1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUH1:btng54SMLr+/AO/kIhfoKMHds

Score
10/10

Malware Config

Targets

    • Target

      2024-02-24_9acb49fe86451eee800d1af5d043fe57_cryptolocker

    • Size

      60KB

    • MD5

      9acb49fe86451eee800d1af5d043fe57

    • SHA1

      4a531edb027a942f0658b2f902f21e0a558f13ff

    • SHA256

      067309e3216a38cbb4456b1c5fd79e96bd4681ea0e79908e54368293a9ecb9dc

    • SHA512

      02a44972b4f6fa0055c5890c5dc1975d465f5f26debd4716e39dcabeb086dc06940d43e15821c6554442615d7adc69a52f6a2bdae45ae79396fc3d99bbef8422

    • SSDEEP

      1536:btB9g/xtCSKfxLIc//Xr+/AO/kIZ3ft2nVuTKB6nggOlHdUH1:btng54SMLr+/AO/kIhfoKMHds

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks