cryptolocker | 724799e37d6b47dc099caea7aabb0c1246a5041537d425601639d551e42bd425 | Triage

Sharing

General

Target

724799e37d6b47dc099caea7aabb0c1246a5041537d425601639d551e42bd425
Size

352KB
Sample

221206-ll9p3aee34
MD5

a93d75cb6f72c1847c3f5afc9c94bbbb
SHA1

016409e124f98d565c5a5fa3d3b2428152259df7
SHA256

724799e37d6b47dc099caea7aabb0c1246a5041537d425601639d551e42bd425
SHA512

ad79d2f68b0b2036794bd047256ed8f9eccd497db7701b5f1b80e7b4388a28774edfa50abf846427aa81b833c0cd970dcd4bd468b05f5d943f5a8f1baa2c00f5
SSDEEP

6144:Y3Q7OlkZayQFnE0oqCtBK/OLyUsn07wWQshOBqSTeaybz+ffB:v/rWZoqf/OCPIOMj1P+

Score

10^/10

cryptolocker persistence ransomware

Malware Config

Targets

- Target
  
  724799e37d6b47dc099caea7aabb0c1246a5041537d425601639d551e42bd425
- Size
  
  352KB
- MD5
  
  a93d75cb6f72c1847c3f5afc9c94bbbb
- SHA1
  
  016409e124f98d565c5a5fa3d3b2428152259df7
- SHA256
  
  724799e37d6b47dc099caea7aabb0c1246a5041537d425601639d551e42bd425
- SHA512
  
  ad79d2f68b0b2036794bd047256ed8f9eccd497db7701b5f1b80e7b4388a28774edfa50abf846427aa81b833c0cd970dcd4bd468b05f5d943f5a8f1baa2c00f5
- SSDEEP
  
  6144:Y3Q7OlkZayQFnE0oqCtBK/OLyUsn07wWQshOBqSTeaybz+ffB:v/rWZoqf/OCPIOMj1P+
Score

10^/10

cryptolocker persistence ransomware
- CryptoLocker
  Ransomware family with multiple variants.
  ransomware cryptolocker
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

cryptolockerpersistenceransomware

behavioral2

cryptolockerpersistenceransomware