Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-02-29_540133c2799cabad4b5c8b6f81a5e0d4_cryptolocker

  • Size

    63KB

  • Sample

    240229-khkq4abe8t

  • MD5

    540133c2799cabad4b5c8b6f81a5e0d4

  • SHA1

    caea03bbcf8c84d6fb69d224df39d8e403e345d3

  • SHA256

    57660d2ead4ca60aaaee659ecd5293310e8e3db659ef795e5bebcf7eaab46e1a

  • SHA512

    1daf0c6f90091a036279940cad4375c8473d598b441f60f6422a7d36526adba7fb23a05782264ed46ed76be7f40c6f8fc56a0ef0106d313db1d753e6734fe905

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGs:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Z

Score
10/10

Malware Config

Targets

    • Target

      2024-02-29_540133c2799cabad4b5c8b6f81a5e0d4_cryptolocker

    • Size

      63KB

    • MD5

      540133c2799cabad4b5c8b6f81a5e0d4

    • SHA1

      caea03bbcf8c84d6fb69d224df39d8e403e345d3

    • SHA256

      57660d2ead4ca60aaaee659ecd5293310e8e3db659ef795e5bebcf7eaab46e1a

    • SHA512

      1daf0c6f90091a036279940cad4375c8473d598b441f60f6422a7d36526adba7fb23a05782264ed46ed76be7f40c6f8fc56a0ef0106d313db1d753e6734fe905

    • SSDEEP

      1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDScGs:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7Z

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks