Overview

overview

10

Static

static

b4c05e0e06...ed.exe

windows7-x64

10

b4c05e0e06...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a_unpacked

  • Size

    362KB

  • Sample

    221026-2d11yshee3

  • MD5

    3921543c211364b4827c55aeeef5260c

  • SHA1

    4b7f71b8e7f228dbb0d296120b6f6f455d22248c

  • SHA256

    d828981e90be2089e64c4a72961e9bbe2522709c242a8839c36cc9e45818e08d

  • SHA512

    e50ca28538254b535256c1b2542a8d894b9177f3037508c3331197b5338fba609818e4a756c3fa9135c11df7c12aa22302d0e4336ba6b78858d10bb0e845221e

  • SSDEEP

    6144:5vUC68qdnE8dF49BpAoWvcUZUq1XvNWgTO3x5N22vWvLRKKAX5l++SyVI:pxCRE8dQvWBZU6/1T85I2vCMX5l+Zn

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      b4c05e0e065058ae79d3ce9d51a470946aae036d2b163f85adcef10a6343246a_unpacked

    • Size

      362KB

    • MD5

      3921543c211364b4827c55aeeef5260c

    • SHA1

      4b7f71b8e7f228dbb0d296120b6f6f455d22248c

    • SHA256

      d828981e90be2089e64c4a72961e9bbe2522709c242a8839c36cc9e45818e08d

    • SHA512

      e50ca28538254b535256c1b2542a8d894b9177f3037508c3331197b5338fba609818e4a756c3fa9135c11df7c12aa22302d0e4336ba6b78858d10bb0e845221e

    • SSDEEP

      6144:5vUC68qdnE8dF49BpAoWvcUZUq1XvNWgTO3x5N22vWvLRKKAX5l++SyVI:pxCRE8dQvWBZU6/1T85I2vCMX5l+Zn

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks