Overview

overview

10

Static

static

a2bc305928...ed.exe

windows7-x64

10

a2bc305928...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a2bc3059283d7cc7bc574ce32cb6b8bfd27e02ac3810a21bd3a9b84c17f18a72_unpacked

  • Size

    340KB

  • Sample

    221026-2d1eeshed9

  • MD5

    ffeae4a391a1d5203bd04b4161557227

  • SHA1

    7c7013dd8def75c94828b40ffa139b6d89ec4683

  • SHA256

    81fc45c95bdb421257645b4ff91a6afc82201d3ffe570c059994d79ff1484f90

  • SHA512

    2621e4b60d5f962f9ddb2307f2fffe5d9e375a4872693f065f6e2a3fde4f4e8b7a4230493b7cb5a3f7dfe68a1ac3765ffc17bb7a6b543642640a64e661eaf967

  • SSDEEP

    6144:xucUo8XEe1jP5lAtpfWgTO3x5N22vWvLRKKAX5l++SygIzt:xu3PXEe1jREVT85I2vCMX5l+ZKZ

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      a2bc3059283d7cc7bc574ce32cb6b8bfd27e02ac3810a21bd3a9b84c17f18a72_unpacked

    • Size

      340KB

    • MD5

      ffeae4a391a1d5203bd04b4161557227

    • SHA1

      7c7013dd8def75c94828b40ffa139b6d89ec4683

    • SHA256

      81fc45c95bdb421257645b4ff91a6afc82201d3ffe570c059994d79ff1484f90

    • SHA512

      2621e4b60d5f962f9ddb2307f2fffe5d9e375a4872693f065f6e2a3fde4f4e8b7a4230493b7cb5a3f7dfe68a1ac3765ffc17bb7a6b543642640a64e661eaf967

    • SSDEEP

      6144:xucUo8XEe1jP5lAtpfWgTO3x5N22vWvLRKKAX5l++SygIzt:xu3PXEe1jREVT85I2vCMX5l+ZKZ

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks