Overview

overview

10

Static

static

3

2023-05-10...er.exe

windows7-x64

10

2023-05-10...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2023-05-10_425285913719fbe1121fe2b5bc4a3654_cryptolocker

  • Size

    338KB

  • Sample

    230511-dxqgkadc6z

  • MD5

    425285913719fbe1121fe2b5bc4a3654

  • SHA1

    9af8d5b4f7bf1e517a475f5cfd58551333019506

  • SHA256

    026e0c95f7bd367869eff94fe12cf77bdcc85d20fd75f32849ea4681cc50aa97

  • SHA512

    8d440d5fe84290b743da1c2c5b2d0929e3b052cb8d487d267aca84aec5263716020d6c4d24fb0c757054ed5bb93a75688cf875a59a66aa70e0cc40757b122013

  • SSDEEP

    3072:2MBf7xbe7VWdtjgsM3+cYAJp8VbhdvCKJ:/BNb8VucYAJpedvC

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      2023-05-10_425285913719fbe1121fe2b5bc4a3654_cryptolocker

    • Size

      338KB

    • MD5

      425285913719fbe1121fe2b5bc4a3654

    • SHA1

      9af8d5b4f7bf1e517a475f5cfd58551333019506

    • SHA256

      026e0c95f7bd367869eff94fe12cf77bdcc85d20fd75f32849ea4681cc50aa97

    • SHA512

      8d440d5fe84290b743da1c2c5b2d0929e3b052cb8d487d267aca84aec5263716020d6c4d24fb0c757054ed5bb93a75688cf875a59a66aa70e0cc40757b122013

    • SSDEEP

      3072:2MBf7xbe7VWdtjgsM3+cYAJp8VbhdvCKJ:/BNb8VucYAJpedvC

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks