Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-09-25_6f9f57af77054eab4d336290929be1a4_cryptolocker

  • Size

    65KB

  • Sample

    240925-d5cknswclg

  • MD5

    6f9f57af77054eab4d336290929be1a4

  • SHA1

    529ce6f6944bceeb56411aeced578082367ab235

  • SHA256

    d447ee5e77c643183345746f70677d9ae869d4258073889914b8ba6c3a7fd476

  • SHA512

    7f6fad0db58489328408451b68e3d503e41c909d3f08466e24e7810de180006c660c98afc0a219639adb66ba02a08d21490307eb2f44372b76843620479cfd43

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoS:1nK6a+qdOOtEvwDpjI

Score
7/10

Malware Config

Targets

    • Target

      2024-09-25_6f9f57af77054eab4d336290929be1a4_cryptolocker

    • Size

      65KB

    • MD5

      6f9f57af77054eab4d336290929be1a4

    • SHA1

      529ce6f6944bceeb56411aeced578082367ab235

    • SHA256

      d447ee5e77c643183345746f70677d9ae869d4258073889914b8ba6c3a7fd476

    • SHA512

      7f6fad0db58489328408451b68e3d503e41c909d3f08466e24e7810de180006c660c98afc0a219639adb66ba02a08d21490307eb2f44372b76843620479cfd43

    • SSDEEP

      1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoS:1nK6a+qdOOtEvwDpjI

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks