Overview

overview

10

Static

static

c7dc529d8a...78.exe

windows7_x64

10

c7dc529d8a...78.exe

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378

  • Size

    827KB

  • Sample

    220707-1ptkksdchk

  • MD5

    7f9c454a2e016e533e181d53eba113bc

  • SHA1

    694dc7713537a7237030f7623881423fcb8d8c5c

  • SHA256

    c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378

  • SHA512

    6869cf5a7c3526acf402b1ef09a9477dedf6cf534ff728e0823b9413ba41e888bd5b61cc20421d4a799df493126598a4a906ac2ab46147d9e4bcfa5d3600a110

Score
10/10
cryptolockerpersistenceransomwaresuricata

Malware Config

Targets

    • Target

      c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378

    • Size

      827KB

    • MD5

      7f9c454a2e016e533e181d53eba113bc

    • SHA1

      694dc7713537a7237030f7623881423fcb8d8c5c

    • SHA256

      c7dc529d8aae76b4e797e4e9e3ea7cd69669e6c3bb3f94d80f1974d1b9f69378

    • SHA512

      6869cf5a7c3526acf402b1ef09a9477dedf6cf534ff728e0823b9413ba41e888bd5b61cc20421d4a799df493126598a4a906ac2ab46147d9e4bcfa5d3600a110

    Score
    10/10
    cryptolockerpersistenceransomwaresuricata

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks