Overview

overview

10

Static

static

9ec4697891...34.exe

windows7-x64

10

9ec4697891...34.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ec4697891cc6c9add803044a29bdd9d05701509b9eddc370d4caf00c15ef734

  • Size

    355KB

  • Sample

    221206-ypme6ahc36

  • MD5

    de400607d06b41a6f8b0935c3607541d

  • SHA1

    f9924a0eb4e715f2c5e370235d39f295b6f95aa8

  • SHA256

    9ec4697891cc6c9add803044a29bdd9d05701509b9eddc370d4caf00c15ef734

  • SHA512

    4c7949096a20017489635d5440ab46513ccf12fe9cb57a1a0b0fd609db9ccf624bf1623d254c2adba8c510f4fcda1dc6b521a6b66860f7904cc8baac45f8018e

  • SSDEEP

    6144:MzsQe4NQnn7swHWLJwpFHBqZ4IBbe5RJ7GgcbjYkuyfRVnL:MzReciWLMFh4DYRJ7EYklpp

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      9ec4697891cc6c9add803044a29bdd9d05701509b9eddc370d4caf00c15ef734

    • Size

      355KB

    • MD5

      de400607d06b41a6f8b0935c3607541d

    • SHA1

      f9924a0eb4e715f2c5e370235d39f295b6f95aa8

    • SHA256

      9ec4697891cc6c9add803044a29bdd9d05701509b9eddc370d4caf00c15ef734

    • SHA512

      4c7949096a20017489635d5440ab46513ccf12fe9cb57a1a0b0fd609db9ccf624bf1623d254c2adba8c510f4fcda1dc6b521a6b66860f7904cc8baac45f8018e

    • SSDEEP

      6144:MzsQe4NQnn7swHWLJwpFHBqZ4IBbe5RJ7GgcbjYkuyfRVnL:MzReciWLMFh4DYRJ7EYklpp

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks