Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-29_85a6705e18b0a586e97de3504157976f_cryptolocker

  • Size

    98KB

  • Sample

    240329-edkbwaha6z

  • MD5

    85a6705e18b0a586e97de3504157976f

  • SHA1

    0c64f1933da23e6b48527ef18b1c86a440c1deee

  • SHA256

    a14cf55e41b66b3e02f9665b268019f0776e2c7b9846e451b8d89a385e251e93

  • SHA512

    f1477014c00b1c0afe36413efedf176f9fcf7436fa3ee58f5a6053f419820709a2a784b613991decf96f8133e0d2039b1fce1044b3afdc4fe813bd47072a83ba

  • SSDEEP

    1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwO:26a+2OtEvwDpjtzx

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_85a6705e18b0a586e97de3504157976f_cryptolocker

    • Size

      98KB

    • MD5

      85a6705e18b0a586e97de3504157976f

    • SHA1

      0c64f1933da23e6b48527ef18b1c86a440c1deee

    • SHA256

      a14cf55e41b66b3e02f9665b268019f0776e2c7b9846e451b8d89a385e251e93

    • SHA512

      f1477014c00b1c0afe36413efedf176f9fcf7436fa3ee58f5a6053f419820709a2a784b613991decf96f8133e0d2039b1fce1044b3afdc4fe813bd47072a83ba

    • SSDEEP

      1536:26QFElP6n+gBQMOtEvwDpjQGYQbN/PKwNCWwO:26a+2OtEvwDpjtzx

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks