Analysis

  • max time kernel
    142s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    27-05-2022 23:01

General

  • Target

    03e3cc01a263edb9aefb411ebf2efb74d2130651400dc3baaa5e344ff1ec47ad.exe

  • Size

    177KB

  • MD5

    6f8987e28fed878d08858a943e7c6e7c

  • SHA1

    1fb1d7408e99195e23a71f49ce31bc90041dd4ee

  • SHA256

    03e3cc01a263edb9aefb411ebf2efb74d2130651400dc3baaa5e344ff1ec47ad

  • SHA512

    e42427a6603379938ba40cc7d0b1608458a9d3f22af6811b291b3e6e5fb2cc28cd991b54f106cb8a5f661adb69817d55f54c5b1f557a7c8cc6f74ba7906f6f36

Score
10/10

Malware Config

Signatures

  • suricata: ET MALWARE Ransomware Locky CnC Beacon 21 May

    suricata: ET MALWARE Ransomware Locky CnC Beacon 21 May

Processes

  • C:\Users\Admin\AppData\Local\Temp\03e3cc01a263edb9aefb411ebf2efb74d2130651400dc3baaa5e344ff1ec47ad.exe
    "C:\Users\Admin\AppData\Local\Temp\03e3cc01a263edb9aefb411ebf2efb74d2130651400dc3baaa5e344ff1ec47ad.exe"
    1⤵
      PID:1928

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1928-54-0x0000000074E91000-0x0000000074E93000-memory.dmp

      Filesize

      8KB

    • memory/1928-55-0x0000000000630000-0x0000000000650000-memory.dmp

      Filesize

      128KB

    • memory/1928-61-0x0000000002410000-0x0000000002437000-memory.dmp

      Filesize

      156KB

    • memory/1928-62-0x0000000000660000-0x0000000000680000-memory.dmp

      Filesize

      128KB