Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-17_41941e02fc77e43456eaf72748d861e1_cryptolocker

  • Size

    75KB

  • Sample

    240417-kcpg4ahh46

  • MD5

    41941e02fc77e43456eaf72748d861e1

  • SHA1

    7e452001445ce90b74e8e8843490920e42f46606

  • SHA256

    6a80ba5ca3b2e935c1cd658cbee453e243bee49bf37f5ac55b2ced96c39e1267

  • SHA512

    124748560093f1461cbbd72b148d48d327ead031224e73b445cfe9c8551e0ec347d1c5cefe0f399f993d04cfa1f83c40d11f610bc8e8fc263d05d4561bb7bf26

  • SSDEEP

    1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3Ku3o:ZVxkGOtEvwDpjcas

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_41941e02fc77e43456eaf72748d861e1_cryptolocker

    • Size

      75KB

    • MD5

      41941e02fc77e43456eaf72748d861e1

    • SHA1

      7e452001445ce90b74e8e8843490920e42f46606

    • SHA256

      6a80ba5ca3b2e935c1cd658cbee453e243bee49bf37f5ac55b2ced96c39e1267

    • SHA512

      124748560093f1461cbbd72b148d48d327ead031224e73b445cfe9c8551e0ec347d1c5cefe0f399f993d04cfa1f83c40d11f610bc8e8fc263d05d4561bb7bf26

    • SSDEEP

      1536:ZzFbxmLPWQMOtEvwDpj386Sj/WprgJN6tZdOyJ3Ku3o:ZVxkGOtEvwDpjcas

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks