cryptolocker | 6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

6af16a07d1...le.exe

windows7_x64

6af16a07d1...le.exe

windows10_x64

Sharing

General

Target

6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c.sample
Size

360KB
Sample

210726-s9azdqtzks
MD5

354f7ec15741db7fcdfe7b158c14dfaa
SHA1

1265f62cb1bf781baaf5161e8b2fcd40a4026747
SHA256

6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c
SHA512

c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227

Score

10^/10

cryptolocker persistence ransomware suricata

Static task

static1

Behavioral task

behavioral1

Sample

6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c.sample.exe

Resource

win7v20210410

cryptolocker persistence ransomware suricata

windows7_x64

0 signatures

0 seconds

Behavioral task

behavioral2

Sample

6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c.sample.exe

Resource

win10v20210408

cryptolocker persistence ransomware suricata

windows10_x64

0 signatures

0 seconds

Malware Config

Targets

- Target
  
  6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c.sample
- Size
  
  360KB
- MD5
  
  354f7ec15741db7fcdfe7b158c14dfaa
- SHA1
  
  1265f62cb1bf781baaf5161e8b2fcd40a4026747
- SHA256
  
  6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c
- SHA512
  
  c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227
Score

10^/10

cryptolocker persistence ransomware suricata
- CryptoLocker
  Ransomware family with multiple variants.
  ransomware cryptolocker
- suricata: ET MALWARE Zeus GameOver Possible DGA NXDOMAIN Responses
  suricata
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptolockerpersistenceransomwaresuricata

behavioral2

cryptolockerpersistenceransomwaresuricata

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.