Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-05-30_977ac5657ad6e6148506449185a5e3dd_cryptolocker

  • Size

    51KB

  • Sample

    240530-z83rxsaa8v

  • MD5

    977ac5657ad6e6148506449185a5e3dd

  • SHA1

    d0273819eee9d2c6ffd021bafcd157fac54b3211

  • SHA256

    47a6e1d7b24438163014b30b8e3bf741dfd2b58d630b122f7f1c323bad170416

  • SHA512

    6566b489f13341761a7b45f19bc507d0e051ab12c7ab424a2e7ec9db9ff08f2acee943cafb788ec6c8216eef69dd7c3d0f7910e174466597500edaf0d8b652aa

  • SSDEEP

    768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZUp:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLqp

Score
10/10

Malware Config

Targets

    • Target

      2024-05-30_977ac5657ad6e6148506449185a5e3dd_cryptolocker

    • Size

      51KB

    • MD5

      977ac5657ad6e6148506449185a5e3dd

    • SHA1

      d0273819eee9d2c6ffd021bafcd157fac54b3211

    • SHA256

      47a6e1d7b24438163014b30b8e3bf741dfd2b58d630b122f7f1c323bad170416

    • SHA512

      6566b489f13341761a7b45f19bc507d0e051ab12c7ab424a2e7ec9db9ff08f2acee943cafb788ec6c8216eef69dd7c3d0f7910e174466597500edaf0d8b652aa

    • SSDEEP

      768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqbIu55id3AMWZUp:X6QFElP6n+gJQMOtEvwDpjB0GIWiWLqp

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks