Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-29_2fcfe5fc16bb7d0d246a506cdbc83cce_cryptolocker

  • Size

    46KB

  • Sample

    240329-t4hcjadb52

  • MD5

    2fcfe5fc16bb7d0d246a506cdbc83cce

  • SHA1

    6b5413586aeb8aaf9d9a72e7507072a854551f17

  • SHA256

    b474e4a2123c8ee0b269c3059ad6319e8f8fb6bbeefbf1ad120e90c16a5c6159

  • SHA512

    ccc44f95e37409db68820c1bef71fdf2ce981949bcd978ba133f850b6bb79344d003dff61619a5ed31b1af408e0211ef1f1ca9608aee14b4e2873ddd20c56f3a

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhXSj:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+l

Score
10/10

Malware Config

Targets

    • Target

      2024-03-29_2fcfe5fc16bb7d0d246a506cdbc83cce_cryptolocker

    • Size

      46KB

    • MD5

      2fcfe5fc16bb7d0d246a506cdbc83cce

    • SHA1

      6b5413586aeb8aaf9d9a72e7507072a854551f17

    • SHA256

      b474e4a2123c8ee0b269c3059ad6319e8f8fb6bbeefbf1ad120e90c16a5c6159

    • SHA512

      ccc44f95e37409db68820c1bef71fdf2ce981949bcd978ba133f850b6bb79344d003dff61619a5ed31b1af408e0211ef1f1ca9608aee14b4e2873ddd20c56f3a

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedmhXSj:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+l

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks