Overview

overview

10

Static

static

3

2024-03-02...er.exe

windows7-x64

10

2024-03-02...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-02_d15685fbb5e5e45d4f9d31078268f345_cryptolocker

  • Size

    390KB

  • Sample

    240302-zswnnshh29

  • MD5

    d15685fbb5e5e45d4f9d31078268f345

  • SHA1

    9551d766b07a5a8e98146bc91473eb027dc0968c

  • SHA256

    6ce538003451f172118e593922997afb745a618aad609b010224278e6d262091

  • SHA512

    c4c768d8bb2af978ccaaf62e6cdbdd1e8c524a678929a064017e5b9a9b178d4430a76ac19d569e6849f300b13aa97f6b8d08d573f5fdd4e74793d02573dd5455

  • SSDEEP

    6144:rWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvCJS9SGg:rWkEuCaNT85I2vCMX5l+ZRvqKK

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      2024-03-02_d15685fbb5e5e45d4f9d31078268f345_cryptolocker

    • Size

      390KB

    • MD5

      d15685fbb5e5e45d4f9d31078268f345

    • SHA1

      9551d766b07a5a8e98146bc91473eb027dc0968c

    • SHA256

      6ce538003451f172118e593922997afb745a618aad609b010224278e6d262091

    • SHA512

      c4c768d8bb2af978ccaaf62e6cdbdd1e8c524a678929a064017e5b9a9b178d4430a76ac19d569e6849f300b13aa97f6b8d08d573f5fdd4e74793d02573dd5455

    • SSDEEP

      6144:rWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvCJS9SGg:rWkEuCaNT85I2vCMX5l+ZRvqKK

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks