Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-04-22_be602adfd437ff555964cbf8c52b82c9_cryptolocker

  • Size

    41KB

  • Sample

    240422-m3pa5aae34

  • MD5

    be602adfd437ff555964cbf8c52b82c9

  • SHA1

    c62fbc5a4c892c5787c40ec903b9d0a2cc9475d7

  • SHA256

    5f672a3191b1ffba988862a2c5e9a97bcfa797f780c5878787947528244dd9c4

  • SHA512

    08ccb11744d18275c40f7a9e13c88fe5a99a1e960a45b55ad44e849f273150d5cdbcdf5a6425ab571a42de6627f9971b1074b41f00efae377e489b3afb645af3

  • SSDEEP

    768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3e:bIDOw9a0Dwo3P1ojvUSD79Re

Score
10/10

Malware Config

Targets

    • Target

      2024-04-22_be602adfd437ff555964cbf8c52b82c9_cryptolocker

    • Size

      41KB

    • MD5

      be602adfd437ff555964cbf8c52b82c9

    • SHA1

      c62fbc5a4c892c5787c40ec903b9d0a2cc9475d7

    • SHA256

      5f672a3191b1ffba988862a2c5e9a97bcfa797f780c5878787947528244dd9c4

    • SHA512

      08ccb11744d18275c40f7a9e13c88fe5a99a1e960a45b55ad44e849f273150d5cdbcdf5a6425ab571a42de6627f9971b1074b41f00efae377e489b3afb645af3

    • SSDEEP

      768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyE9x3e:bIDOw9a0Dwo3P1ojvUSD79Re

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks