Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-16_f2ab38ec4bf58f4df24385a31734b5fc_cryptolocker

  • Size

    46KB

  • Sample

    240516-1fnyqshe7v

  • MD5

    f2ab38ec4bf58f4df24385a31734b5fc

  • SHA1

    d79b123835a7fa535a350a49c8bcb6d9efa37ea9

  • SHA256

    ba63b627e4c0077fb920e09049fafb3b98bad2bc7f7a83562359a2e9ecffbb58

  • SHA512

    de14d79c5b078481b523b53b11e33fca33580fa9a38f294aec6913a96b976dc46ca718fce609195fa54bbe65567f4e2b9bdcdafb7ab9bc96fd321670ed3a960d

  • SSDEEP

    768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPN1:P6QFElP6k+MRQMOtEvwDpjBQpVXE1

Score
10/10

Malware Config

Targets

    • Target

      2024-05-16_f2ab38ec4bf58f4df24385a31734b5fc_cryptolocker

    • Size

      46KB

    • MD5

      f2ab38ec4bf58f4df24385a31734b5fc

    • SHA1

      d79b123835a7fa535a350a49c8bcb6d9efa37ea9

    • SHA256

      ba63b627e4c0077fb920e09049fafb3b98bad2bc7f7a83562359a2e9ecffbb58

    • SHA512

      de14d79c5b078481b523b53b11e33fca33580fa9a38f294aec6913a96b976dc46ca718fce609195fa54bbe65567f4e2b9bdcdafb7ab9bc96fd321670ed3a960d

    • SSDEEP

      768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPN1:P6QFElP6k+MRQMOtEvwDpjBQpVXE1

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks