Overview

overview

10

Static

static

136e899181...65.exe

windows7_x64

10

136e899181...65.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    136e8991816b958bb76aaf22fefd18194cf78a80e95d572754f95e1f86149a65

  • Size

    355KB

  • Sample

    220603-gyg4csfagn

  • MD5

    f1e2de2a9135138ef5b15093612dd813

  • SHA1

    ea64129f9634ce8a7c3f5e0dd8c2e70af46ae8a5

  • SHA256

    136e8991816b958bb76aaf22fefd18194cf78a80e95d572754f95e1f86149a65

  • SHA512

    134f737dd1ec3dc7800ef96191cc81c5ae97b2ac882d77464fab8c585b838763793e5a521df1dbcd5399955e1e32a08f2d45612b06151b805ab8aa003f79dfb7

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      136e8991816b958bb76aaf22fefd18194cf78a80e95d572754f95e1f86149a65

    • Size

      355KB

    • MD5

      f1e2de2a9135138ef5b15093612dd813

    • SHA1

      ea64129f9634ce8a7c3f5e0dd8c2e70af46ae8a5

    • SHA256

      136e8991816b958bb76aaf22fefd18194cf78a80e95d572754f95e1f86149a65

    • SHA512

      134f737dd1ec3dc7800ef96191cc81c5ae97b2ac882d77464fab8c585b838763793e5a521df1dbcd5399955e1e32a08f2d45612b06151b805ab8aa003f79dfb7

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks