Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-16_834ffc2c3d3f37411860665cdb2da445_cryptolocker

  • Size

    44KB

  • Sample

    240316-mm272shb9y

  • MD5

    834ffc2c3d3f37411860665cdb2da445

  • SHA1

    11df27c06ba91ebc1cc1a680ab2ed93c2d31396e

  • SHA256

    671d84988d9483cd352ef52fe0efb1acfd348ce93790f758628582de1f9c10d3

  • SHA512

    a315b356866375a9c1f89f84b8217b78b2194b1b2be703af1e93d0ec66e9798348d0bab70a5e0a137b2f43571e939544d09311bba2d0111d118151e5f5df44e2

  • SSDEEP

    768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3rtJ:V6QFElP6n+gMQMOtEvwDpjyaHaXvJ

Score
10/10

Malware Config

Targets

    • Target

      2024-03-16_834ffc2c3d3f37411860665cdb2da445_cryptolocker

    • Size

      44KB

    • MD5

      834ffc2c3d3f37411860665cdb2da445

    • SHA1

      11df27c06ba91ebc1cc1a680ab2ed93c2d31396e

    • SHA256

      671d84988d9483cd352ef52fe0efb1acfd348ce93790f758628582de1f9c10d3

    • SHA512

      a315b356866375a9c1f89f84b8217b78b2194b1b2be703af1e93d0ec66e9798348d0bab70a5e0a137b2f43571e939544d09311bba2d0111d118151e5f5df44e2

    • SSDEEP

      768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLaHaMMm2X3rtJ:V6QFElP6n+gMQMOtEvwDpjyaHaXvJ

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks