Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-06_c62887970971e4dc35005e96a634eab3_cryptolocker

  • Size

    72KB

  • Sample

    240306-hbxqzadb9x

  • MD5

    c62887970971e4dc35005e96a634eab3

  • SHA1

    0c27ee52e0437380108e98dcb5a00b7460a35c1b

  • SHA256

    1a23de75ff7f1c7006f06b667fcead5149670e787143d3d86c4eba6a6c748a88

  • SHA512

    c69a341787391338b41584a258fc70c20988f6bf5ac48b29964639a4369ead5f40b35e93987ede3d668caab566ceaa36628d95dafe3ab8381c20297da4e87fd3

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sc:X6a+SOtEvwDpjBZYvQd2v

Score
10/10

Malware Config

Targets

    • Target

      2024-03-06_c62887970971e4dc35005e96a634eab3_cryptolocker

    • Size

      72KB

    • MD5

      c62887970971e4dc35005e96a634eab3

    • SHA1

      0c27ee52e0437380108e98dcb5a00b7460a35c1b

    • SHA256

      1a23de75ff7f1c7006f06b667fcead5149670e787143d3d86c4eba6a6c748a88

    • SHA512

      c69a341787391338b41584a258fc70c20988f6bf5ac48b29964639a4369ead5f40b35e93987ede3d668caab566ceaa36628d95dafe3ab8381c20297da4e87fd3

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1sc:X6a+SOtEvwDpjBZYvQd2v

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks