c422df7827eea72daadbfa19d03bc44b5a6453f22a51543412a838febe3cecf5 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2024-05-22...er.exe

windows7-x64

9

2024-05-22...er.exe

windows10-2004-x64

9

Sharing

General

Target

2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker
Size

47KB
Sample

240522-sepjwafc67
MD5

c065b744c5ea8ffefa42754a557fc6a3
SHA1

23aa915e10602ede33d6257f410f05518483b701
SHA256

c422df7827eea72daadbfa19d03bc44b5a6453f22a51543412a838febe3cecf5
SHA512

f9c614192e23ce8567ef8f68bb2d89a58a2bb7ca46311074a8782d2a4be0ec3152a8edccf78fb25b94e6ee042a88fe04cd2c01706cd2c105dcf51e25ab66b5a1
SSDEEP

384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2VR:79inqyNR/QtOOtEvwDpjBKccJVODvy3w

Score

10^/10

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker.exe

Resource

win7-20240508-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-05-22_c065b744c5ea8ffefa42754a557fc6a3_cryptolocker
- Size
  
  47KB
- MD5
  
  c065b744c5ea8ffefa42754a557fc6a3
- SHA1
  
  23aa915e10602ede33d6257f410f05518483b701
- SHA256
  
  c422df7827eea72daadbfa19d03bc44b5a6453f22a51543412a838febe3cecf5
- SHA512
  
  f9c614192e23ce8567ef8f68bb2d89a58a2bb7ca46311074a8782d2a4be0ec3152a8edccf78fb25b94e6ee042a88fe04cd2c01706cd2c105dcf51e25ab66b5a1
- SSDEEP
  
  384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5oCCM8CLW2VR:79inqyNR/QtOOtEvwDpjBKccJVODvy3w
Score

9^/10
- Detection of CryptoLocker Variants
- Detection of Cryptolocker Samples
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.