Overview

overview

10

Static

static

a8ff366f37...47.exe

windows7-x64

10

a8ff366f37...47.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8ff366f374462d0dfda4205b58c93f2c98b0fecf7e81de4b12725cd3e938247

  • Size

    380KB

  • Sample

    221019-1wttxsaddq

  • MD5

    a2481f0e6e6ba5262846a3c9919fc3f0

  • SHA1

    ea7f82eb961fe7846d9d50ac256c005722cbdd93

  • SHA256

    a8ff366f374462d0dfda4205b58c93f2c98b0fecf7e81de4b12725cd3e938247

  • SHA512

    c130d91021a55836a07cce65bb545f86f3a309ff8545646bdf49430eae6d2729f217878fd9bf6e08d40223cf5de97474a054eb3dd274e24fa244721df5ad3603

  • SSDEEP

    6144:dhdo9xPW/afhV3ceWu5e2Rio6AMqXv+/WgTO3x5N22vWvLRKKAX5l++SyVI:Twsafhege+6AMq/+bT85I2vCMX5l+Zn

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      a8ff366f374462d0dfda4205b58c93f2c98b0fecf7e81de4b12725cd3e938247

    • Size

      380KB

    • MD5

      a2481f0e6e6ba5262846a3c9919fc3f0

    • SHA1

      ea7f82eb961fe7846d9d50ac256c005722cbdd93

    • SHA256

      a8ff366f374462d0dfda4205b58c93f2c98b0fecf7e81de4b12725cd3e938247

    • SHA512

      c130d91021a55836a07cce65bb545f86f3a309ff8545646bdf49430eae6d2729f217878fd9bf6e08d40223cf5de97474a054eb3dd274e24fa244721df5ad3603

    • SSDEEP

      6144:dhdo9xPW/afhV3ceWu5e2Rio6AMqXv+/WgTO3x5N22vWvLRKKAX5l++SyVI:Twsafhege+6AMq/+bT85I2vCMX5l+Zn

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks