Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-08_22686ee60bab260e1057cf8c018ba374_cryptolocker

  • Size

    39KB

  • Sample

    240409-s64swaef7y

  • MD5

    22686ee60bab260e1057cf8c018ba374

  • SHA1

    f681ffe6f72c732c2d04da15f3bfb63c5d95cbfb

  • SHA256

    243c8d846ec9a8f768e05693760eb7c3f55efec67fd6bdb2aee739fca18c85f0

  • SHA512

    32cc337c0f7a55091b3426512fecf2e34f9d8ecea70b8dacbd4c827e8b18bcabc867cc50be32243a480c5af7c23e7dc37fc83a157dde876251b29f0a55963473

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLoDFx:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLG

Score
10/10

Malware Config

Targets

    • Target

      2024-04-08_22686ee60bab260e1057cf8c018ba374_cryptolocker

    • Size

      39KB

    • MD5

      22686ee60bab260e1057cf8c018ba374

    • SHA1

      f681ffe6f72c732c2d04da15f3bfb63c5d95cbfb

    • SHA256

      243c8d846ec9a8f768e05693760eb7c3f55efec67fd6bdb2aee739fca18c85f0

    • SHA512

      32cc337c0f7a55091b3426512fecf2e34f9d8ecea70b8dacbd4c827e8b18bcabc867cc50be32243a480c5af7c23e7dc37fc83a157dde876251b29f0a55963473

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkLoDFx:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLG

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks