Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-24_f6219a35fd1e7c05ff05e76ce68ad0f2_cryptolocker

  • Size

    37KB

  • Sample

    240224-c8zc6sfg6t

  • MD5

    f6219a35fd1e7c05ff05e76ce68ad0f2

  • SHA1

    464e5cef515be6801e528c80e08367b1afb2e5ef

  • SHA256

    527dc11be760ad05fb051fe70271202f67e9c8632dc402887d706b8e4e03df68

  • SHA512

    f708aef0e27cce137543614d37c152b72c4cd94df94229865f3a839ec4f69f53e1db899d1bfb88d1febd43ee7351ef5b373ee3d327bd33017610a00436af0501

  • SSDEEP

    768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3ZK:bxNrC7kYo1Fxf3s06gfK

Score
10/10

Malware Config

Targets

    • Target

      2024-02-24_f6219a35fd1e7c05ff05e76ce68ad0f2_cryptolocker

    • Size

      37KB

    • MD5

      f6219a35fd1e7c05ff05e76ce68ad0f2

    • SHA1

      464e5cef515be6801e528c80e08367b1afb2e5ef

    • SHA256

      527dc11be760ad05fb051fe70271202f67e9c8632dc402887d706b8e4e03df68

    • SHA512

      f708aef0e27cce137543614d37c152b72c4cd94df94229865f3a839ec4f69f53e1db899d1bfb88d1febd43ee7351ef5b373ee3d327bd33017610a00436af0501

    • SSDEEP

      768:bxNQIE0eBhkL2Fo1CCwgfjOg1tsJ6zeen7JEgx3ZK:bxNrC7kYo1Fxf3s06gfK

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks