b2d6ab297a29a2ad1925aad3b499014699f5049dcbab2295c7744e0ab73e8d3d | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2024-02-22...er.exe

windows7-x64

9

2024-02-22...er.exe

windows10-2004-x64

9

Sharing

General

Target

2024-02-22_9fe146130d1fadbbc50dc1e2d91a4601_cryptolocker
Size

40KB
Sample

240222-c4l72sbc34
MD5

9fe146130d1fadbbc50dc1e2d91a4601
SHA1

e03dfe200aa6978c338715448422912b44869dc0
SHA256

b2d6ab297a29a2ad1925aad3b499014699f5049dcbab2295c7744e0ab73e8d3d
SHA512

f7b3ba7cd9dd285d89bc9d70cca5add371111d5668a2add32e3bbf3b20eeace552dc6e7f0da6c8db150363d779df4a633b6000b82f3db66384fc6c344aad22d0
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CyYo7/:6j+1NMOtEvwDpjrRD7/

Score

10^/10

Static task

static1

4 signatures

Behavioral task

behavioral1

Sample

2024-02-22_9fe146130d1fadbbc50dc1e2d91a4601_cryptolocker.exe

Resource

win7-20240221-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-02-22_9fe146130d1fadbbc50dc1e2d91a4601_cryptolocker.exe

Resource

win10v2004-20240221-en

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-02-22_9fe146130d1fadbbc50dc1e2d91a4601_cryptolocker
- Size
  
  40KB
- MD5
  
  9fe146130d1fadbbc50dc1e2d91a4601
- SHA1
  
  e03dfe200aa6978c338715448422912b44869dc0
- SHA256
  
  b2d6ab297a29a2ad1925aad3b499014699f5049dcbab2295c7744e0ab73e8d3d
- SHA512
  
  f7b3ba7cd9dd285d89bc9d70cca5add371111d5668a2add32e3bbf3b20eeace552dc6e7f0da6c8db150363d779df4a633b6000b82f3db66384fc6c344aad22d0
- SSDEEP
  
  768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CyYo7/:6j+1NMOtEvwDpjrRD7/
Score

9^/10
- Detection of CryptoLocker Variants
- Detection of Cryptolocker Samples
- Detects executables built or packed with MPress PE compressor
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.