Analysis

  • max time kernel
    1795s
  • max time network
    1802s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    28-06-2022 17:45

General

  • Target

    97df0b4bb0a3e5b1fb6fedb351b9be5e0a08e35ca709e4c378bb61f5b1ca4325.exe

  • Size

    184KB

  • MD5

    8c3d2979439d446d7021145dc079bd42

  • SHA1

    23ba6aecee86be2f0fa554d6162c6e67d4084e7b

  • SHA256

    97df0b4bb0a3e5b1fb6fedb351b9be5e0a08e35ca709e4c378bb61f5b1ca4325

  • SHA512

    7e1cc24463c3f7bcd3ba51a46662a20c4000f89ffd2e68965ac51dc40f6d006a43958ea324438971cbbeb66eb39a2947928cd2673e46374b6e0bf2c38b6007d4

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\97df0b4bb0a3e5b1fb6fedb351b9be5e0a08e35ca709e4c378bb61f5b1ca4325.exe
    "C:\Users\Admin\AppData\Local\Temp\97df0b4bb0a3e5b1fb6fedb351b9be5e0a08e35ca709e4c378bb61f5b1ca4325.exe"
    1⤵
      PID:1604

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1604-130-0x00000000005E0000-0x00000000005E6000-memory.dmp

      Filesize

      24KB

    • memory/1604-131-0x0000000000400000-0x000000000044B000-memory.dmp

      Filesize

      300KB