cryptolocker | 2f3a3462e46a5373d2087cb030289c361270e4b5b8799e4d5ca422e83f4e988d | Triage

Sharing

General

Target

2f3a3462e46a5373d2087cb030289c361270e4b5b8799e4d5ca422e83f4e988d.exe
Size

338KB
Sample

210916-y9eaaaech5
MD5

3a474a22a2ddd5ba05031a4f3ff309e1
SHA1

b9d3d30e54468d0cdaf3dddd044378cf101e179d
SHA256

2f3a3462e46a5373d2087cb030289c361270e4b5b8799e4d5ca422e83f4e988d
SHA512

b00f87a23a4ad38b1a52fb77b5a507c7a5e4ac36025559bc5f1589aad76f58ddc99b940e4cdd78c9085fe4128362c3740b9f524ff2288e0826e051e980061e77

Score

10^/10

cryptolocker persistence ransomware

Malware Config

Targets

- Target
  
  2f3a3462e46a5373d2087cb030289c361270e4b5b8799e4d5ca422e83f4e988d.exe
- Size
  
  338KB
- MD5
  
  3a474a22a2ddd5ba05031a4f3ff309e1
- SHA1
  
  b9d3d30e54468d0cdaf3dddd044378cf101e179d
- SHA256
  
  2f3a3462e46a5373d2087cb030289c361270e4b5b8799e4d5ca422e83f4e988d
- SHA512
  
  b00f87a23a4ad38b1a52fb77b5a507c7a5e4ac36025559bc5f1589aad76f58ddc99b940e4cdd78c9085fe4128362c3740b9f524ff2288e0826e051e980061e77
Score

10^/10

cryptolocker persistence ransomware
- CryptoLocker
  Ransomware family with multiple variants.
  ransomware cryptolocker
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptolockerpersistenceransomware

behavioral2

cryptolockerpersistenceransomware