Overview

overview

10

Static

static

4bf65d1818...b8.exe

windows7-x64

10

4bf65d1818...b8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4bf65d181881bbc86ad154f3352acd2ebb5f76893c9e7b3b05230726d1a7e3b8

  • Size

    362KB

  • Sample

    221021-xflltsbbdq

  • MD5

    5a4add9136f4bab32c9576ea03133c3e

  • SHA1

    c72534ef23599b2801da50e2e7e5206c8c57ab1e

  • SHA256

    4bf65d181881bbc86ad154f3352acd2ebb5f76893c9e7b3b05230726d1a7e3b8

  • SHA512

    4c31c713cb37b68410c90f5b5c802c65c2ced6d08ce7d7ff59b4fd14a2f01481161a118fbdace4773e4291b44056076740c73f14a73beef25d21b5ac6d8b026d

  • SSDEEP

    6144:KBSqu8gXoPBY1NCA/wEMWxHBzXvNWgTO3x5N22vWvLRKKAX5l++SyVI:zbVSBYj9px/1T85I2vCMX5l+Zn

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      4bf65d181881bbc86ad154f3352acd2ebb5f76893c9e7b3b05230726d1a7e3b8

    • Size

      362KB

    • MD5

      5a4add9136f4bab32c9576ea03133c3e

    • SHA1

      c72534ef23599b2801da50e2e7e5206c8c57ab1e

    • SHA256

      4bf65d181881bbc86ad154f3352acd2ebb5f76893c9e7b3b05230726d1a7e3b8

    • SHA512

      4c31c713cb37b68410c90f5b5c802c65c2ced6d08ce7d7ff59b4fd14a2f01481161a118fbdace4773e4291b44056076740c73f14a73beef25d21b5ac6d8b026d

    • SSDEEP

      6144:KBSqu8gXoPBY1NCA/wEMWxHBzXvNWgTO3x5N22vWvLRKKAX5l++SyVI:zbVSBYj9px/1T85I2vCMX5l+Zn

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks