Overview

overview

10

Static

static

8

4c4836b640...1a.exe

windows7_x64

10

4c4836b640...1a.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4c4836b640c5c0b9150cd19747ebc1ae94793788721df2f4392544ac281bc91a

  • Size

    306KB

  • Sample

    220712-hzw5caabg9

  • MD5

    c3e44673beef5ea9729f961ae675970a

  • SHA1

    9a123902896be80475be8bd360f5449ae800f358

  • SHA256

    4c4836b640c5c0b9150cd19747ebc1ae94793788721df2f4392544ac281bc91a

  • SHA512

    10fb7d2ea7909b8a062fb1e50b02f3cdd4d7227061ccb0cbc20c05556d121c2814406a836454f094329f33e084c00ceb72c9981e34c334d36c5a16c8ab60de13

Score
10/10
cryptolockerpersistenceransomwaresuricataupx

Malware Config

Targets

    • Target

      4c4836b640c5c0b9150cd19747ebc1ae94793788721df2f4392544ac281bc91a

    • Size

      306KB

    • MD5

      c3e44673beef5ea9729f961ae675970a

    • SHA1

      9a123902896be80475be8bd360f5449ae800f358

    • SHA256

      4c4836b640c5c0b9150cd19747ebc1ae94793788721df2f4392544ac281bc91a

    • SHA512

      10fb7d2ea7909b8a062fb1e50b02f3cdd4d7227061ccb0cbc20c05556d121c2814406a836454f094329f33e084c00ceb72c9981e34c334d36c5a16c8ab60de13

    Score
    10/10
    cryptolockerpersistenceransomwaresuricataupx

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

      suricata

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks