Overview

overview

10

Static

static

6af16a07d1...le.exe

windows7_x64

10

6af16a07d1...le.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c.sample

  • Size

    360KB

  • Sample

    210726-s9azdqtzks

  • MD5

    354f7ec15741db7fcdfe7b158c14dfaa

  • SHA1

    1265f62cb1bf781baaf5161e8b2fcd40a4026747

  • SHA256

    6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c

  • SHA512

    c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227

Score
10/10
cryptolockerpersistenceransomwaresuricata

Malware Config

Targets

    • Target

      6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c.sample

    • Size

      360KB

    • MD5

      354f7ec15741db7fcdfe7b158c14dfaa

    • SHA1

      1265f62cb1bf781baaf5161e8b2fcd40a4026747

    • SHA256

      6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c

    • SHA512

      c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227

    Score
    10/10
    cryptolockerpersistenceransomwaresuricata

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • suricata: ET MALWARE Zeus GameOver Possible DGA NXDOMAIN Responses

      suricata

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks