Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-07_eac429a798a111df3c486348376ddd18_cryptolocker

  • Size

    47KB

  • Sample

    240307-1mc5tafg21

  • MD5

    eac429a798a111df3c486348376ddd18

  • SHA1

    f7c4093cf76302e9adfd8a90adf7cccb5b6b0b3f

  • SHA256

    baa1661ef0fb74775e7a5021aaf4a6c743ac775f4285e158f9d1d3cc65e2ec76

  • SHA512

    bb716b3462203a85b8052526019acc5f5db4f73cbf9601ae7d5c0cb62e3fa094286749a6d442c498b9d5e337c081a08e680cf3975d59cca833efa17dc7c8ff0f

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTTHFACo:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+h

Score
10/10

Malware Config

Targets

    • Target

      2024-03-07_eac429a798a111df3c486348376ddd18_cryptolocker

    • Size

      47KB

    • MD5

      eac429a798a111df3c486348376ddd18

    • SHA1

      f7c4093cf76302e9adfd8a90adf7cccb5b6b0b3f

    • SHA256

      baa1661ef0fb74775e7a5021aaf4a6c743ac775f4285e158f9d1d3cc65e2ec76

    • SHA512

      bb716b3462203a85b8052526019acc5f5db4f73cbf9601ae7d5c0cb62e3fa094286749a6d442c498b9d5e337c081a08e680cf3975d59cca833efa17dc7c8ff0f

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhTTHFACo:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+h

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks