Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-03_a0891af499a44f5ad0e216c6913144ce_cryptolocker

  • Size

    82KB

  • Sample

    240603-ke97ksad93

  • MD5

    a0891af499a44f5ad0e216c6913144ce

  • SHA1

    878f5a447314f77bcfa75a1520b808c70d39bc5b

  • SHA256

    898abc1e77e9e0ca0f6c91c0c87cc2b11cf8886ade6589329f8a07a747ae6f21

  • SHA512

    c21d6136ab41a87a47ba3ea7c4c670a0d9f0f8d6e0df61f0ff1ee95bed4ec8b7f4327620f7a7ab539983b78c7e9bf1e30ef184806e12c3233403b7bcb5b47a89

  • SSDEEP

    1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVN:vCjsIOtEvwDpj5H9YvQd2q

Score
10/10

Malware Config

Targets

    • Target

      2024-06-03_a0891af499a44f5ad0e216c6913144ce_cryptolocker

    • Size

      82KB

    • MD5

      a0891af499a44f5ad0e216c6913144ce

    • SHA1

      878f5a447314f77bcfa75a1520b808c70d39bc5b

    • SHA256

      898abc1e77e9e0ca0f6c91c0c87cc2b11cf8886ade6589329f8a07a747ae6f21

    • SHA512

      c21d6136ab41a87a47ba3ea7c4c670a0d9f0f8d6e0df61f0ff1ee95bed4ec8b7f4327620f7a7ab539983b78c7e9bf1e30ef184806e12c3233403b7bcb5b47a89

    • SSDEEP

      1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNqVN:vCjsIOtEvwDpj5H9YvQd2q

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks