Overview

overview

10

Static

static

3

2024-03-02...er.exe

windows7-x64

10

2024-03-02...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-02_57075198c87ac0e2936355d2736b1164_cryptolocker

  • Size

    404KB

  • Sample

    240302-vcvn8afe76

  • MD5

    57075198c87ac0e2936355d2736b1164

  • SHA1

    059d97a1bbce7eaabfd357348518ee9895e507cb

  • SHA256

    17849d3bf40f1d6833c538664ac843f728aba013c965e3ccb38b273c5f5c7e79

  • SHA512

    1cc1360eaceb241f4bf3ff5acbd13c1b1ce91945ce002f570ff1d0742206522557f651e4285bcedc38375732aec1fed2b03633fa60227619b5a8f1b7999abf00

  • SSDEEP

    12288:gWkEuCaNT85I2vCMX5l+ZRvjfQ3AoMQ3:gEuCalMpCjfQ3AoMQ3

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      2024-03-02_57075198c87ac0e2936355d2736b1164_cryptolocker

    • Size

      404KB

    • MD5

      57075198c87ac0e2936355d2736b1164

    • SHA1

      059d97a1bbce7eaabfd357348518ee9895e507cb

    • SHA256

      17849d3bf40f1d6833c538664ac843f728aba013c965e3ccb38b273c5f5c7e79

    • SHA512

      1cc1360eaceb241f4bf3ff5acbd13c1b1ce91945ce002f570ff1d0742206522557f651e4285bcedc38375732aec1fed2b03633fa60227619b5a8f1b7999abf00

    • SSDEEP

      12288:gWkEuCaNT85I2vCMX5l+ZRvjfQ3AoMQ3:gEuCalMpCjfQ3AoMQ3

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks