Analysis

  • max time kernel
    155s
  • max time network
    173s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    03/07/2022, 03:14

General

  • Target

    3d653771933422f9a081ea122865da76edde83cdeb41b8b8e377833e75e21aca.exe

  • Size

    606KB

  • MD5

    91a61e3be9cc7251972f6ee8d4836cb4

  • SHA1

    f78c091a623c605e74511dd80d1a48376c2c4145

  • SHA256

    3d653771933422f9a081ea122865da76edde83cdeb41b8b8e377833e75e21aca

  • SHA512

    aa773715d5333b7fc20517e8449f5fd4d54781d6d175ce7d0fbaea9b862ac6aeca8835254a37c8edccaf584d3b56d15a79d20fe296f885d2c1c300cd5487da60

Score
10/10

Malware Config

Signatures

  • suricata: ET MALWARE Locky CnC Checkin

    suricata: ET MALWARE Locky CnC Checkin

  • suricata: ET MALWARE Locky CnC Checkin HTTP Pattern

    suricata: ET MALWARE Locky CnC Checkin HTTP Pattern

  • suricata: ET MALWARE Locky CnC checkin Nov 21

    suricata: ET MALWARE Locky CnC checkin Nov 21

  • suricata: ET MALWARE Locky CnC checkin Nov 21 M2

    suricata: ET MALWARE Locky CnC checkin Nov 21 M2

Processes

  • C:\Users\Admin\AppData\Local\Temp\3d653771933422f9a081ea122865da76edde83cdeb41b8b8e377833e75e21aca.exe
    "C:\Users\Admin\AppData\Local\Temp\3d653771933422f9a081ea122865da76edde83cdeb41b8b8e377833e75e21aca.exe"
    1⤵
      PID:1064

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1064-54-0x00000000769D1000-0x00000000769D3000-memory.dmp

      Filesize

      8KB

    • memory/1064-55-0x0000000000400000-0x00000000004DA000-memory.dmp

      Filesize

      872KB

    • memory/1064-56-0x0000000000400000-0x00000000004DA000-memory.dmp

      Filesize

      872KB

    • memory/1064-57-0x0000000000400000-0x00000000004DA000-memory.dmp

      Filesize

      872KB