Overview

overview

10

Static

static

0dd7f3dffe...43.exe

windows7_x64

10

0dd7f3dffe...43.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dd7f3dffe8c6e69df6137cb413ad25c474d73a86f1d46d52846990aa66e6f43

  • Size

    343KB

  • Sample

    220529-tj5x4afbb3

  • MD5

    012d9088558072bc3103ab5da39ddd54

  • SHA1

    a6eee7369eb008fe48789ad4e8d2d8dcba4f23d9

  • SHA256

    0dd7f3dffe8c6e69df6137cb413ad25c474d73a86f1d46d52846990aa66e6f43

  • SHA512

    ecd1258b11d5f66c25f2ab26430c23b9b6d9e04777962ea11e275f64a86a9dcd1400a665d022a8924b727ac3298c8569f49f268a619b21818fb980d1e0a38418

Score
10/10
cryptolockerpersistenceransomwaresuricata

Malware Config

Targets

    • Target

      0dd7f3dffe8c6e69df6137cb413ad25c474d73a86f1d46d52846990aa66e6f43

    • Size

      343KB

    • MD5

      012d9088558072bc3103ab5da39ddd54

    • SHA1

      a6eee7369eb008fe48789ad4e8d2d8dcba4f23d9

    • SHA256

      0dd7f3dffe8c6e69df6137cb413ad25c474d73a86f1d46d52846990aa66e6f43

    • SHA512

      ecd1258b11d5f66c25f2ab26430c23b9b6d9e04777962ea11e275f64a86a9dcd1400a665d022a8924b727ac3298c8569f49f268a619b21818fb980d1e0a38418

    Score
    10/10
    cryptolockerpersistenceransomwaresuricata

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks