Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-05_fb0167ce539bd5847899616790efd931_cryptolocker

  • Size

    68KB

  • Sample

    240405-ew3aeace37

  • MD5

    fb0167ce539bd5847899616790efd931

  • SHA1

    eca13b95b9ef02e076fde27593e275cfa856cdb5

  • SHA256

    944a5942c0c5307834eb2fd06c651496ff3333588b6bafb5ad993318d14ea90c

  • SHA512

    c19c4f41128d864382e00c350134e1c7a1970a6b2b34b1d65039e22eaaf6dda840f5180a174c4207e5d36ab08a31e49020fd008a976f7c1f90635e60440e6c10

  • SSDEEP

    1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUb:DW60sllyWOtEvwDpjwF85V

Score
10/10

Malware Config

Targets

    • Target

      2024-04-05_fb0167ce539bd5847899616790efd931_cryptolocker

    • Size

      68KB

    • MD5

      fb0167ce539bd5847899616790efd931

    • SHA1

      eca13b95b9ef02e076fde27593e275cfa856cdb5

    • SHA256

      944a5942c0c5307834eb2fd06c651496ff3333588b6bafb5ad993318d14ea90c

    • SHA512

      c19c4f41128d864382e00c350134e1c7a1970a6b2b34b1d65039e22eaaf6dda840f5180a174c4207e5d36ab08a31e49020fd008a976f7c1f90635e60440e6c10

    • SSDEEP

      1536:Dk/xY0sllyGQMOtEvwDpjwycDtKkQZQRKb61vSbgZ3QzNKUb:DW60sllyWOtEvwDpjwF85V

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks