Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-27_489ec5d6659d6a33c0243e298ac561ff_cryptolocker

  • Size

    35KB

  • Sample

    240327-x7dqasdf6s

  • MD5

    489ec5d6659d6a33c0243e298ac561ff

  • SHA1

    5c2ebbea995be24a7ccd896325b1e4849879434b

  • SHA256

    4edbd073bc89ba1ffde8b084e166d779b522e8fe3d78a5801bf5de1fa5df268f

  • SHA512

    e4711c0351fad0e8dd1c636f0ac1ee42c65cc2b7ad395d00fabaf7d9080da37f52d7472b7813aa3fe99eed7f5e668a955b9e12706401e9cc7ca8937f3c475614

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPbNI:YGzl5wjRQBBOsP1QMOtEvwDpjgar2I

Score
10/10

Malware Config

Targets

    • Target

      2024-03-27_489ec5d6659d6a33c0243e298ac561ff_cryptolocker

    • Size

      35KB

    • MD5

      489ec5d6659d6a33c0243e298ac561ff

    • SHA1

      5c2ebbea995be24a7ccd896325b1e4849879434b

    • SHA256

      4edbd073bc89ba1ffde8b084e166d779b522e8fe3d78a5801bf5de1fa5df268f

    • SHA512

      e4711c0351fad0e8dd1c636f0ac1ee42c65cc2b7ad395d00fabaf7d9080da37f52d7472b7813aa3fe99eed7f5e668a955b9e12706401e9cc7ca8937f3c475614

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPbNI:YGzl5wjRQBBOsP1QMOtEvwDpjgar2I

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks