d88cfba962e3af83234a113edcfdb823873d6843309f85b607881572155f2a2c | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2024-06-09...er.exe

windows7-x64

9

2024-06-09...er.exe

windows10-2004-x64

9

Sharing

General

Target

2024-06-09_6ec5fe9e7270d6d98099791d8f4b9c5e_cryptolocker
Size

46KB
Sample

240609-c856qadb66
MD5

6ec5fe9e7270d6d98099791d8f4b9c5e
SHA1

66676bb2adfc97d06155a8ab47b25c09f1721311
SHA256

d88cfba962e3af83234a113edcfdb823873d6843309f85b607881572155f2a2c
SHA512

8edf97dc28d582a099cbcb57c11108a49d28b79fe308fbb723271e14f93d3a7b34f048320a3afa90e39e70fb484596056b852d54293bd31fc3e7d2a38b7fbf95
SSDEEP

768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPow:P6QFElP6k+MRQMOtEvwDpjBQpVXzw

Score

10^/10

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

2024-06-09_6ec5fe9e7270d6d98099791d8f4b9c5e_cryptolocker.exe

Resource

win7-20240508-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-06-09_6ec5fe9e7270d6d98099791d8f4b9c5e_cryptolocker.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-06-09_6ec5fe9e7270d6d98099791d8f4b9c5e_cryptolocker
- Size
  
  46KB
- MD5
  
  6ec5fe9e7270d6d98099791d8f4b9c5e
- SHA1
  
  66676bb2adfc97d06155a8ab47b25c09f1721311
- SHA256
  
  d88cfba962e3af83234a113edcfdb823873d6843309f85b607881572155f2a2c
- SHA512
  
  8edf97dc28d582a099cbcb57c11108a49d28b79fe308fbb723271e14f93d3a7b34f048320a3afa90e39e70fb484596056b852d54293bd31fc3e7d2a38b7fbf95
- SSDEEP
  
  768:P6LsoEEeegiZPvEhHS5+Mh/QtOOtEvwDpjBpaD3TUogs/VXpAPow:P6QFElP6k+MRQMOtEvwDpjBQpVXzw
Score

9^/10
- Detection of CryptoLocker Variants
- Detection of Cryptolocker Samples
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.