Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-25_a7656e968071489e7327ae8790283473_cryptolocker

  • Size

    43KB

  • Sample

    240325-zfybqshb83

  • MD5

    a7656e968071489e7327ae8790283473

  • SHA1

    15400a0a729d81b322cdeeda2835c9952471637d

  • SHA256

    aa4de9e49cd5e596ed071645870bb3a516c60e33662c7e479d23a1227e3ce6b2

  • SHA512

    fcb89885f5755c45a57c8e4da0007d2b46a14734ad7cce9aa73c456990ecd535d9b1e0f3c356e4426555630d13e4e0606f9d2e372edeee22ce89ac78faa92888

  • SSDEEP

    768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNAx:bgGYcA/53GADw8Cl/nx

Score
10/10

Malware Config

Targets

    • Target

      2024-03-25_a7656e968071489e7327ae8790283473_cryptolocker

    • Size

      43KB

    • MD5

      a7656e968071489e7327ae8790283473

    • SHA1

      15400a0a729d81b322cdeeda2835c9952471637d

    • SHA256

      aa4de9e49cd5e596ed071645870bb3a516c60e33662c7e479d23a1227e3ce6b2

    • SHA512

      fcb89885f5755c45a57c8e4da0007d2b46a14734ad7cce9aa73c456990ecd535d9b1e0f3c356e4426555630d13e4e0606f9d2e372edeee22ce89ac78faa92888

    • SSDEEP

      768:bgX4zYcgTEu6QOaryfjqDDw3sCu5b+syQNAx:bgGYcA/53GADw8Cl/nx

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks