f0c00d222d8add24eb4e65f7da97f6326ca7df1a17e93a291d182c0344cee41c | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2024-03-20...er.exe

windows7-x64

9

2024-03-20...er.exe

windows10-2004-x64

9

Sharing

General

Target

2024-03-20_72007eec410507248db359d818a6929a_cryptolocker
Size

57KB
Sample

240320-a2lsdscc42
MD5

72007eec410507248db359d818a6929a
SHA1

aa934f15bc6298cbc34d79761e1be9918e20cb10
SHA256

f0c00d222d8add24eb4e65f7da97f6326ca7df1a17e93a291d182c0344cee41c
SHA512

7fc0fd2d48c8fb8553912fe7c136f76ad70fd6abedd6349c09aaf1437c5bbcaa54c25678cc008d14258bbdc8e8aa3f66a06bcd30bf0fee629233cf746bbe8744
SSDEEP

768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5axcE9Gz:z6QFElP6n+gKmddpMOtEvwDpj9aYa59a

Score

10^/10

upx

Static task

static1

5 signatures

Behavioral task

behavioral1

Sample

2024-03-20_72007eec410507248db359d818a6929a_cryptolocker.exe

Resource

win7-20231129-en

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-03-20_72007eec410507248db359d818a6929a_cryptolocker.exe

Resource

win10v2004-20240226-en

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-03-20_72007eec410507248db359d818a6929a_cryptolocker
- Size
  
  57KB
- MD5
  
  72007eec410507248db359d818a6929a
- SHA1
  
  aa934f15bc6298cbc34d79761e1be9918e20cb10
- SHA256
  
  f0c00d222d8add24eb4e65f7da97f6326ca7df1a17e93a291d182c0344cee41c
- SHA512
  
  7fc0fd2d48c8fb8553912fe7c136f76ad70fd6abedd6349c09aaf1437c5bbcaa54c25678cc008d14258bbdc8e8aa3f66a06bcd30bf0fee629233cf746bbe8744
- SSDEEP
  
  768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5axcE9Gz:z6QFElP6n+gKmddpMOtEvwDpj9aYa59a
Score

9^/10

upx
- Detection of CryptoLocker Variants
- Detection of Cryptolocker Samples
- UPX dump on OEP (original entry point)
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.