clop | 389e03b1a1fd1c527d48df74d3c26a0483a5b105f36841193172f1ee80e62c1b | Triage

Resubmissions

02-06-2022 16:53

220602-vdzdsscebj 10

26-07-2021 12:57

210726-pbqzsgt6sj 1

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220414-en
submitted
02-06-2022 16:53

Sharing

Report Analysis Logs

General

Target

389e03b1a1fd1c527d48df74d3c26a0483a5b105f36841193172f1ee80e62c1b.exe
Size

178KB
MD5

8fc09cb1540a6dea87a078b92c8f2b0a
SHA1

16f48624ea2a575e1bdceb4ac6151d97d4de80b6
SHA256

389e03b1a1fd1c527d48df74d3c26a0483a5b105f36841193172f1ee80e62c1b
SHA512

e045881e8b2cca4384eb4ded3b91dcd3dbba54834785de6cf6f8be87fae84f5c67dfb3a12928cb2bcbbeeb660304a9560fb3de056d9f558d6b347e6f8136054a

Score

10^/10

clop ransomware

Malware Config

Signatures

Clop
Ransomware discovered in early 2019 which has been actively developed since release.
ransomware clop

Detects Clop Payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/756-56-0x0000000000400000-0x000000000042C000-memory.dmp	family_clop

C:\Users\Admin\AppData\Local\Temp\389e03b1a1fd1c527d48df74d3c26a0483a5b105f36841193172f1ee80e62c1b.exe
"C:\Users\Admin\AppData\Local\Temp\389e03b1a1fd1c527d48df74d3c26a0483a5b105f36841193172f1ee80e62c1b.exe"
1⤵
PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/756-54-0x0000000075941000-0x0000000075943000-memory.dmp

Filesize
8KB

Download
memory/756-55-0x00000000001C0000-0x00000000001C5000-memory.dmp

Filesize
20KB

Download
memory/756-56-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download