Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-16_a7c9e9a90cdcefdffd1bf243659094d3_cryptolocker

  • Size

    76KB

  • Sample

    240516-hybf9ahg29

  • MD5

    a7c9e9a90cdcefdffd1bf243659094d3

  • SHA1

    84402129e3f4057dd3102a0271cd73cde85f24a7

  • SHA256

    448fb9593097d3d1ab45eef3ab987c27ed49cf0817cc41afa2bf2d53b3c9d31c

  • SHA512

    041b9b4bf6f310c9ff4bbf9f6187355e812dbaa7379faff06fe730aadc429079afe521296d02dfe6a88398b21b415d42e96f874759168446800aea3e8d11e870

  • SSDEEP

    1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkN:X6a+SOtEvwDpjBZYvQd2e

Score
10/10

Malware Config

Targets

    • Target

      2024-05-16_a7c9e9a90cdcefdffd1bf243659094d3_cryptolocker

    • Size

      76KB

    • MD5

      a7c9e9a90cdcefdffd1bf243659094d3

    • SHA1

      84402129e3f4057dd3102a0271cd73cde85f24a7

    • SHA256

      448fb9593097d3d1ab45eef3ab987c27ed49cf0817cc41afa2bf2d53b3c9d31c

    • SHA512

      041b9b4bf6f310c9ff4bbf9f6187355e812dbaa7379faff06fe730aadc429079afe521296d02dfe6a88398b21b415d42e96f874759168446800aea3e8d11e870

    • SSDEEP

      1536:X6QFElP6n+gJQMOtEvwDpjBZYTjipvF2bx1rHsoLkN:X6a+SOtEvwDpjBZYvQd2e

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks