Analysis

  • max time kernel
    148s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    13-07-2022 15:03

General

  • Target

    6d5d672d9e8402a4e6a2309c71443e93efccccee8f9959afc24ae9a89fe2935c.exe

  • Size

    606KB

  • MD5

    e35c9d795e7fb1db54465ef46d70efe6

  • SHA1

    2c31bbb3a0fcbfc0052ee75f649be4313480b739

  • SHA256

    6d5d672d9e8402a4e6a2309c71443e93efccccee8f9959afc24ae9a89fe2935c

  • SHA512

    d5ff96122e33124256ca9ce48452482b4a32bec241ee15f5791c93184f0f78bedaab349fde5ae9387384da09f3ebf730cb002d3673367f28e5c059297704bf5f

Score
10/10

Malware Config

Signatures

  • suricata: ET MALWARE Locky CnC Checkin

    suricata: ET MALWARE Locky CnC Checkin

  • suricata: ET MALWARE Locky CnC Checkin HTTP Pattern

    suricata: ET MALWARE Locky CnC Checkin HTTP Pattern

  • suricata: ET MALWARE Locky CnC checkin Nov 21

    suricata: ET MALWARE Locky CnC checkin Nov 21

  • suricata: ET MALWARE Locky CnC checkin Nov 21 M2

    suricata: ET MALWARE Locky CnC checkin Nov 21 M2

Processes

  • C:\Users\Admin\AppData\Local\Temp\6d5d672d9e8402a4e6a2309c71443e93efccccee8f9959afc24ae9a89fe2935c.exe
    "C:\Users\Admin\AppData\Local\Temp\6d5d672d9e8402a4e6a2309c71443e93efccccee8f9959afc24ae9a89fe2935c.exe"
    1⤵
      PID:4844

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4844-130-0x0000000000400000-0x00000000004DA000-memory.dmp
      Filesize

      872KB

    • memory/4844-131-0x0000000000400000-0x00000000004DA000-memory.dmp
      Filesize

      872KB

    • memory/4844-132-0x0000000000400000-0x00000000004DA000-memory.dmp
      Filesize

      872KB

    • memory/4844-133-0x0000000000400000-0x00000000004DA000-memory.dmp
      Filesize

      872KB