Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-02_6cc89c858529c5ab937d7dded32f76c7_cryptolocker

  • Size

    44KB

  • Sample

    240602-kmncsagd5s

  • MD5

    6cc89c858529c5ab937d7dded32f76c7

  • SHA1

    e8fad2002b8ec19a4e3069861c0973366ad54011

  • SHA256

    d98285e89f97340565b1f0d99ecffdc5b7dff41c3e3dd117caf10f38ad5c2e0b

  • SHA512

    d1d748395c26ae369946f30daa5b1789abd934e868c3a8142a0c8f673a8a11bb45620c038d7bb0d5e4544a258072da0d943d072cb8a7a5f8708768041f37e687

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpamWj:bm74zYcgT/Ekn0ryfjRmA

Score
10/10

Malware Config

Targets

    • Target

      2024-06-02_6cc89c858529c5ab937d7dded32f76c7_cryptolocker

    • Size

      44KB

    • MD5

      6cc89c858529c5ab937d7dded32f76c7

    • SHA1

      e8fad2002b8ec19a4e3069861c0973366ad54011

    • SHA256

      d98285e89f97340565b1f0d99ecffdc5b7dff41c3e3dd117caf10f38ad5c2e0b

    • SHA512

      d1d748395c26ae369946f30daa5b1789abd934e868c3a8142a0c8f673a8a11bb45620c038d7bb0d5e4544a258072da0d943d072cb8a7a5f8708768041f37e687

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jo0nrlwfjDUpamWj:bm74zYcgT/Ekn0ryfjRmA

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks