General
- Target cryptolock_test.exe
- Size 1.9MB
- Sample260816-an4faaad88
- SHA256 1c215f9b10e1a2a1038abc31b012416ccd9e0d2870d1608cb64c16278c04a4d6
- MD5 254703df81b4d57af80f4a073c28dcc0
- SHA1 ed7a7a8488944a9e3325f01d541b52f9175263cd
- SHA512 565bdcc1cddcc2dabcd9015cf598d678dfa38b427d17cd6e461b750c4042a5ded62fd37d340d2f8b4f4d29ce52fef2f57342732fa198f42cc07ef35f15586304
- SSDEEP 24576:bU5Mh3c6qHClooCZ9Eo7rYwZpV8yZa0C+8AvrNwRgyFM3VIH06iyz:bUiG6qgorb77rYw1ZBCOIgMYIU6i
- TLSH T142957C03E69584FAC49DC078C3579536BA32BC8D0B34B2EB2BD49A213E26F906F1D755
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cryptolock_test.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
cryptolock_test.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target cryptolock_test.exe
- Size 1.9MB
- SHA256 1c215f9b10e1a2a1038abc31b012416ccd9e0d2870d1608cb64c16278c04a4d6
- MD5 254703df81b4d57af80f4a073c28dcc0
- SHA1 ed7a7a8488944a9e3325f01d541b52f9175263cd
- SHA512 565bdcc1cddcc2dabcd9015cf598d678dfa38b427d17cd6e461b750c4042a5ded62fd37d340d2f8b4f4d29ce52fef2f57342732fa198f42cc07ef35f15586304
- SSDEEP 24576:bU5Mh3c6qHClooCZ9Eo7rYwZpV8yZa0C+8AvrNwRgyFM3VIH06iyz:bUiG6qgorb77rYw1ZBCOIgMYIU6i
- TLSH T142957C03E69584FAC49DC078C3579536BA32BC8D0B34B2EB2BD49A213E26F906F1D755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Modifies system executable filetype association
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1