Overview

overview

7

Static

static

7

77469c6810...JC.exe

windows7-x64

7

77469c6810...JC.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    1s
  • max time network
    7s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2023, 16:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    77469c681035f60e37deb2c99456a8f4_cryptolocker_JC.exe

  • Size

    54KB

  • MD5

    77469c681035f60e37deb2c99456a8f4

  • SHA1

    7235ad8e729b750013b94b419a2b518065276eef

  • SHA256

    636fb44de8ce4e727771858748d3240a3ea6dbbc12422a945234637548cb4543

  • SHA512

    350f6bdb479a56ab6502600bc11edaaf0267bdd6fbed842c505fd6ebf87b838ded89a2f9a52f325f23efb7974677ff20ef6778d230de0432591cab35659730c9

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFeV0ZOfcpea:zj+soPSMOtEvwDpj4yya

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 5 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\77469c681035f60e37deb2c99456a8f4_cryptolocker_JC.exe
    "C:\Users\Admin\AppData\Local\Temp\77469c681035f60e37deb2c99456a8f4_cryptolocker_JC.exe"
    1⤵
      PID:3916
      • C:\Users\Admin\AppData\Local\Temp\misid.exe
        "C:\Users\Admin\AppData\Local\Temp\misid.exe"
        2⤵
          PID:4460

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\misid.exe
        Filesize

        54KB

        MD5

        9d137dfdb188b338950ea3ac50219b6f

        SHA1

        2e4846c7fdd865793bd4d828c38ad70f497ee62e

        SHA256

        7e2c16d1d99abb59259edd67570154f02782450f2795c73e36f0f9fede7fb450

        SHA512

        c411116c8c05e1efc6bcbaec1de07c3192eaf8867a6f91b99d61a478607270f85dfe283ee9d8ae9bc05c54238a24c8cce192345286e916e8e429baf7124828a6

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\misid.exe
        Filesize

        54KB

        MD5

        9d137dfdb188b338950ea3ac50219b6f

        SHA1

        2e4846c7fdd865793bd4d828c38ad70f497ee62e

        SHA256

        7e2c16d1d99abb59259edd67570154f02782450f2795c73e36f0f9fede7fb450

        SHA512

        c411116c8c05e1efc6bcbaec1de07c3192eaf8867a6f91b99d61a478607270f85dfe283ee9d8ae9bc05c54238a24c8cce192345286e916e8e429baf7124828a6

        Download Submit

      • C:\Users\Admin\AppData\Local\Temp\misid.exe
        Filesize

        54KB

        MD5

        9d137dfdb188b338950ea3ac50219b6f

        SHA1

        2e4846c7fdd865793bd4d828c38ad70f497ee62e

        SHA256

        7e2c16d1d99abb59259edd67570154f02782450f2795c73e36f0f9fede7fb450

        SHA512

        c411116c8c05e1efc6bcbaec1de07c3192eaf8867a6f91b99d61a478607270f85dfe283ee9d8ae9bc05c54238a24c8cce192345286e916e8e429baf7124828a6

        Download Submit

      • memory/3916-0-0x0000000000500000-0x0000000000510000-memory.dmp

        Filesize

        64KB

        Download

      • memory/3916-1-0x00000000004E0000-0x00000000004E6000-memory.dmp

        Filesize

        24KB

        Download

      • memory/3916-2-0x00000000004E0000-0x00000000004E6000-memory.dmp

        Filesize

        24KB

        Download

      • memory/3916-3-0x0000000000660000-0x0000000000666000-memory.dmp

        Filesize

        24KB

        Download

      • memory/3916-17-0x0000000000500000-0x0000000000510000-memory.dmp

        Filesize

        64KB

        Download