Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-17_b4c63553fc09a4a7f81b331470b2b230_cryptolocker

  • Size

    40KB

  • Sample

    240417-klnl6aab24

  • MD5

    b4c63553fc09a4a7f81b331470b2b230

  • SHA1

    9c1c3dc502b873f67c5e35ffd29bc3891fed1cc1

  • SHA256

    9d4616f072320879e85f16f3625115f86bf1dfaf4b96f7492202dcddf74668e9

  • SHA512

    a648dacbdf6aae89a36d651e175699000b9f6dc15386da33ff1443aee0d08386fd313ab6ba5e08969e9fc0d9b2a302f0361d186b5000f8ef50de9017c0a56ba6

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrW:X6QFElP6n+gJQMOtEvwDpjBsYK6rW

Score
10/10

Malware Config

Targets

    • Target

      2024-04-17_b4c63553fc09a4a7f81b331470b2b230_cryptolocker

    • Size

      40KB

    • MD5

      b4c63553fc09a4a7f81b331470b2b230

    • SHA1

      9c1c3dc502b873f67c5e35ffd29bc3891fed1cc1

    • SHA256

      9d4616f072320879e85f16f3625115f86bf1dfaf4b96f7492202dcddf74668e9

    • SHA512

      a648dacbdf6aae89a36d651e175699000b9f6dc15386da33ff1443aee0d08386fd313ab6ba5e08969e9fc0d9b2a302f0361d186b5000f8ef50de9017c0a56ba6

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HKcfrW:X6QFElP6n+gJQMOtEvwDpjBsYK6rW

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks