cryptolocker | hxxps://github[.]com/fabrimagic72/malware-samples | Triage

Submit
Reports

Overview

overview

Static

static

1

URLScan

urlscan

https://github.com/f...

windows10-2004-x64

Sharing

General

Target

https://github.com/fabrimagic72/malware-samples
Sample

240822-c23r1sxhqj

Score

10^/10

cryptolocker wannacry defense_evasion discovery evasion persistence ransomware worm

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://github.com/fabrimagic72/malware-samples

Resource

win10v2004-20240802-en

cryptolocker wannacry defense_evasion discovery evasion persistence ransomware worm

windows10-2004-x64

31 signatures

300 seconds

Malware Config

Targets

- Target
  
  https://github.com/fabrimagic72/malware-samples
Score

10^/10

cryptolocker wannacry defense_evasion discovery evasion persistence ransomware worm
- CryptoLocker
  Ransomware family with multiple variants.
  ransomware cryptolocker
- Wannacry
  WannaCry is a ransomware cryptoworm.
  ransomware worm wannacry
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Downloads MZ/PE file
- Executes dropped EXE
- Modifies file permissions
  discovery
- Adds Run key to start application
  persistence
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
- Legitimate hosting services abused for malware hosting/C2
- Modifies WinLogon
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

File and Directory Permissions Modification

Windows File and Directory Permissions Modification

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

cryptolockerwannacrydefense_evasiondiscoveryevasionpersistenceransomwareworm

© 2018-2024

Terms | Privacy