Overview

overview

10

Static

static

3

d15685fbb5...45.exe

windows7-x64

10

d15685fbb5...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d15685fbb5e5e45d4f9d31078268f345.bin

  • Size

    390KB

  • Sample

    240304-er1wsahd9z

  • MD5

    d15685fbb5e5e45d4f9d31078268f345

  • SHA1

    9551d766b07a5a8e98146bc91473eb027dc0968c

  • SHA256

    6ce538003451f172118e593922997afb745a618aad609b010224278e6d262091

  • SHA512

    c4c768d8bb2af978ccaaf62e6cdbdd1e8c524a678929a064017e5b9a9b178d4430a76ac19d569e6849f300b13aa97f6b8d08d573f5fdd4e74793d02573dd5455

  • SSDEEP

    6144:rWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvCJS9SGg:rWkEuCaNT85I2vCMX5l+ZRvqKK

Score
10/10
cryptolockerpersistenceransomware

Malware Config

Targets

    • Target

      d15685fbb5e5e45d4f9d31078268f345.bin

    • Size

      390KB

    • MD5

      d15685fbb5e5e45d4f9d31078268f345

    • SHA1

      9551d766b07a5a8e98146bc91473eb027dc0968c

    • SHA256

      6ce538003451f172118e593922997afb745a618aad609b010224278e6d262091

    • SHA512

      c4c768d8bb2af978ccaaf62e6cdbdd1e8c524a678929a064017e5b9a9b178d4430a76ac19d569e6849f300b13aa97f6b8d08d573f5fdd4e74793d02573dd5455

    • SSDEEP

      6144:rWmw0EuCN0pLWgTO3x5N22vWvLRKKAX5l++SybIvCJS9SGg:rWkEuCaNT85I2vCMX5l+ZRvqKK

    Score
    10/10
    cryptolockerpersistenceransomware

    • CryptoLocker

      Ransomware family with multiple variants.

      ransomwarecryptolocker

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks