Analysis
-
max time kernel
146s -
max time network
167s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
03-07-2022 18:32
General
-
Target
3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e.exe
-
Size
359KB
-
MD5
258902877202d382f93e883a2f13109e
-
SHA1
f644dce27b8f0833bb8f97529a89aca6516bcf2d
-
SHA256
3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e
-
SHA512
9ba322e1b8e66982016dfb3b4f0675f315edf9e1ce0bad9607fa2ae94f8e143d46b193b191017674048e46a98772b92fd2678258806f1713fe0aed5111ca9de4
Score
10/10
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Locky (Osiris variant)
Variant of the Locky ransomware seen in the wild since early 2017.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e.exe"C:\Users\Admin\AppData\Local\Temp\3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1684-54-0x00000000754A1000-0x00000000754A3000-memory.dmpFilesize
8KB
-
memory/1684-55-0x0000000001F90000-0x0000000001FB8000-memory.dmpFilesize
160KB
-
memory/1684-56-0x0000000000400000-0x000000000045E000-memory.dmpFilesize
376KB
-
memory/1684-58-0x0000000003340000-0x0000000003367000-memory.dmpFilesize
156KB
-
memory/1684-59-0x0000000003340000-0x0000000003367000-memory.dmpFilesize
156KB