Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-06-24_e7538291ce50edb0de475e58a2d97425_cryptolocker

  • Size

    45KB

  • Sample

    240624-lwrx1aweme

  • MD5

    e7538291ce50edb0de475e58a2d97425

  • SHA1

    fbca3b9150a7f93638f0706f120d4ff9a4fe8433

  • SHA256

    cfc3b89924427ebfbc3239ee201b66050b2d8fbd6365b842563dff86ec7cd7da

  • SHA512

    96d2cff8a1ea7b5f97ba96e989b92cdf18b8d55c2e303b4b4ced1ef2308dd1fb5356e28e4cbafa6b9141c52770ab4a24050244647503740dc72a25844994d2db

  • SSDEEP

    384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3b+NY:bm74zYcgT/EkM0ryfjd3WY

Score
10/10

Malware Config

Targets

    • Target

      2024-06-24_e7538291ce50edb0de475e58a2d97425_cryptolocker

    • Size

      45KB

    • MD5

      e7538291ce50edb0de475e58a2d97425

    • SHA1

      fbca3b9150a7f93638f0706f120d4ff9a4fe8433

    • SHA256

      cfc3b89924427ebfbc3239ee201b66050b2d8fbd6365b842563dff86ec7cd7da

    • SHA512

      96d2cff8a1ea7b5f97ba96e989b92cdf18b8d55c2e303b4b4ced1ef2308dd1fb5356e28e4cbafa6b9141c52770ab4a24050244647503740dc72a25844994d2db

    • SSDEEP

      384:bm74uGLLQRcsdeQ72ngEr4K7YmE8jb0nrlwfjDUk3b+NY:bm74zYcgT/EkM0ryfjd3WY

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks