Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-15_3710f1e0559162a1c9209f0d35b1ffa2_cryptolocker

  • Size

    42KB

  • Sample

    240615-rsfcpatdrf

  • MD5

    3710f1e0559162a1c9209f0d35b1ffa2

  • SHA1

    ff3c2b11bb62bf626d9ce0ebca3bc4a7852894a4

  • SHA256

    af62efee8373da9e273840da89bdba657f418525877e0d1a6daeef2643205e80

  • SHA512

    4b4427f01f26f0e2aefa382bff53072fc68dff59390dfd636abdcbd9584b714b173c1140d4221169d6617809ecfec99cdd963411d8c9540fda17dc6ae8a99dc7

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1Tw:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLw

Score
10/10

Malware Config

Targets

    • Target

      2024-06-15_3710f1e0559162a1c9209f0d35b1ffa2_cryptolocker

    • Size

      42KB

    • MD5

      3710f1e0559162a1c9209f0d35b1ffa2

    • SHA1

      ff3c2b11bb62bf626d9ce0ebca3bc4a7852894a4

    • SHA256

      af62efee8373da9e273840da89bdba657f418525877e0d1a6daeef2643205e80

    • SHA512

      4b4427f01f26f0e2aefa382bff53072fc68dff59390dfd636abdcbd9584b714b173c1140d4221169d6617809ecfec99cdd963411d8c9540fda17dc6ae8a99dc7

    • SSDEEP

      768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6WaJIOc+UPPEkL7vF1Tw:YGzl5wjRQBBOsP1QMOtEvwDpjgarrkLw

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks