Overview

overview

10

Static

static

4f3220da01...ed.exe

windows7-x64

10

4f3220da01...ed.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629_unpacked

  • Size

    360KB

  • Sample

    221026-2dy7cshecr

  • MD5

    354f7ec15741db7fcdfe7b158c14dfaa

  • SHA1

    1265f62cb1bf781baaf5161e8b2fcd40a4026747

  • SHA256

    6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c

  • SHA512

    c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227

  • SSDEEP

    6144:7Y56KnPgfagNgMhdAp/WgTO3x5N22vWvLRKKAX5l++SyVI4H:qdgfpNDAxT85I2vCMX5l+Zn

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      4f3220da017e7be3e0b168a958134aae6dc96458cb12118e849465e2af752629_unpacked

    • Size

      360KB

    • MD5

      354f7ec15741db7fcdfe7b158c14dfaa

    • SHA1

      1265f62cb1bf781baaf5161e8b2fcd40a4026747

    • SHA256

      6af16a07d19bcb99eed8b440d7a110ee1bad1dd95eaeda2302c423ab9a5a146c

    • SHA512

      c8425a333a0aa7cb916406b825baaba2e462a81dcfc64b725dceadd81163f8928463603f70e6d5c354dd0ad59e4ed74572bcd780957d947bfa9d97ae89477227

    • SSDEEP

      6144:7Y56KnPgfagNgMhdAp/WgTO3x5N22vWvLRKKAX5l++SyVI4H:qdgfpNDAxT85I2vCMX5l+Zn

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks