cryptolocker | hxxps://github[.]com/ytisf/theZoo/tree/master/malware/Binaries/Ransomware[.]Mamba | Triage

Submit
Reports

Overview

overview

Static

static

1

URLScan

urlscan

https://github.com/y...

windows10-2004-x64

Sharing

General

Target

https://github.com/ytisf/theZoo/tree/master/malware/Binaries/Ransomware.Mamba
Sample

231005-tpj8kscd8s

Score

10^/10

cryptolocker persistence ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://github.com/ytisf/theZoo/tree/master/malware/Binaries/Ransomware.Mamba

Resource

win10v2004-20230915-en

cryptolocker persistence ransomware

windows10-2004-x64

16 signatures

1800 seconds

Malware Config

Targets

- Target
  
  https://github.com/ytisf/theZoo/tree/master/malware/Binaries/Ransomware.Mamba
Score

10^/10

cryptolocker persistence ransomware
- CryptoLocker
  Ransomware family with multiple variants.
  ransomware cryptolocker
- Executes dropped EXE
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Resource Development

Reconnaissance

Tasks

static1

urlscan1

behavioral1

cryptolockerpersistenceransomware

© 2018-2024

Terms | Privacy