87c6b7a5a925fb3ef826d0bc5b622a02ee422ec896de079f3ba594a01029edf4 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2024-05-24...er.exe

windows7-x64

9

2024-05-24...er.exe

windows10-2004-x64

9

Sharing

General

Target

2024-05-24_02d981816ea856323a346ba916cc6b4a_cryptolocker
Size

46KB
Sample

240524-mfcntadf86
MD5

02d981816ea856323a346ba916cc6b4a
SHA1

8190c995bb0269c68298c7d0281d79843f31201c
SHA256

87c6b7a5a925fb3ef826d0bc5b622a02ee422ec896de079f3ba594a01029edf4
SHA512

ad84915db66ac105cbdf162a2930a949b4f68d8fe70448500d9e3d681bcb13df6b597340b722dd63a3f14d15290335c4d940b664a82a4fff3438be96396f8bbd
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPo8:P6QFElP6k+MRQMOtEvwDpjBQpVXz8

Score

10^/10

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2024-05-24_02d981816ea856323a346ba916cc6b4a_cryptolocker.exe

Resource

win7-20240215-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-05-24_02d981816ea856323a346ba916cc6b4a_cryptolocker.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-05-24_02d981816ea856323a346ba916cc6b4a_cryptolocker
- Size
  
  46KB
- MD5
  
  02d981816ea856323a346ba916cc6b4a
- SHA1
  
  8190c995bb0269c68298c7d0281d79843f31201c
- SHA256
  
  87c6b7a5a925fb3ef826d0bc5b622a02ee422ec896de079f3ba594a01029edf4
- SHA512
  
  ad84915db66ac105cbdf162a2930a949b4f68d8fe70448500d9e3d681bcb13df6b597340b722dd63a3f14d15290335c4d940b664a82a4fff3438be96396f8bbd
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPo8:P6QFElP6k+MRQMOtEvwDpjBQpVXz8
Score

9^/10
- Detection of CryptoLocker Variants
- Detection of Cryptolocker Samples
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.