Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-08_0a4ca29f0a063a8c2123d1aba82d0bc8_cryptolocker

  • Size

    38KB

  • Sample

    240308-f5ljpahb3w

  • MD5

    0a4ca29f0a063a8c2123d1aba82d0bc8

  • SHA1

    b3ab1cdb9e0830ae9434ea953ad4ab5fe37f7459

  • SHA256

    c85c785613e99f4f6cc61b21ca646ba2bf54a4d2444e7d88ad97507f4c09a008

  • SHA512

    1b03def9e23aec71dc8341d39ad5598f42215162e1d83e9f1c7777f2fae304d67defc98bbdece7a37099e33abecdbc5b60a3b4e78eeb0ce1c5ffb738ed1bde86

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCpvsb:X6QFElP6n+gJQMOtEvwDpjBmzDUpvG

Score
10/10

Malware Config

Targets

    • Target

      2024-03-08_0a4ca29f0a063a8c2123d1aba82d0bc8_cryptolocker

    • Size

      38KB

    • MD5

      0a4ca29f0a063a8c2123d1aba82d0bc8

    • SHA1

      b3ab1cdb9e0830ae9434ea953ad4ab5fe37f7459

    • SHA256

      c85c785613e99f4f6cc61b21ca646ba2bf54a4d2444e7d88ad97507f4c09a008

    • SHA512

      1b03def9e23aec71dc8341d39ad5598f42215162e1d83e9f1c7777f2fae304d67defc98bbdece7a37099e33abecdbc5b60a3b4e78eeb0ce1c5ffb738ed1bde86

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBVaD3TP7DFCpvsb:X6QFElP6n+gJQMOtEvwDpjBmzDUpvG

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks