General
- Target cryptolock_test.exe
- Size 2.0MB
- Sample260816-lb667avaka
- SHA256 1aa1ab90e21c997cdc65eb862118a04411f2456f861d5cf77ab5b09432516d6b
- MD5 b5ca331d458b4b7c21e7bd97b5855ab9
- SHA1 1ae4dd856f281310694bf31c321b0bb242a50429
- SHA512 c41fa8126de8def880797cc78e488d598d5b5476a6e93e546d20ca4c0b56577a7c824d89e5028b428eac7d6115d312b83638446f9c581e873dbd19a67db56bcf
- SSDEEP 49152:KJkqlxXq0ezV5KT33p65t0uJZoxwWIOYIU6iL:pqWmH9n+L
- TLSH T162A58C03E69584FAC59EC078C3579532BA32BC8E0B35B1EB2BD496203E26F906F5D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cryptolock_test.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
cryptolock_test.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target cryptolock_test.exe
- Size 2.0MB
- SHA256 1aa1ab90e21c997cdc65eb862118a04411f2456f861d5cf77ab5b09432516d6b
- MD5 b5ca331d458b4b7c21e7bd97b5855ab9
- SHA1 1ae4dd856f281310694bf31c321b0bb242a50429
- SHA512 c41fa8126de8def880797cc78e488d598d5b5476a6e93e546d20ca4c0b56577a7c824d89e5028b428eac7d6115d312b83638446f9c581e873dbd19a67db56bcf
- SSDEEP 49152:KJkqlxXq0ezV5KT33p65t0uJZoxwWIOYIU6iL:pqWmH9n+L
- TLSH T162A58C03E69584FAC59EC078C3579532BA32BC8E0B35B1EB2BD496203E26F906F5D715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1