Analysis

  • max time kernel
    58s
  • max time network
    172s
  • platform
    windows10-1703_x64
  • resource
    win10-20230915-en
  • resource tags

    arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11-10-2023 14:43

General

  • Target

    c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655.exe

  • Size

    725KB

  • MD5

    b2665cdc6195fa0776856ef5f1726d80

  • SHA1

    b587e42b53ee757661442bb6926e9e8aab0b3f03

  • SHA256

    c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655

  • SHA512

    51697e4cda6b38b11e903b286d9a9661fad8bd11e85a2fba810e10b8285b1d40b314755bc3f0e5075070aa3102cf80046e28d9e9f071045daab7dc40d59dd72d

  • SSDEEP

    12288:iGvEW8Z/WKMsOB3UGZwVh1ZHjz59gcYUN8ig8rWSyM4efGFhCDhJq+:iGvEWwvsmGupP5CYRggPSefGydQ+

Score
10/10

Malware Config

Signatures

  • Detected Djvu ransomware 1 IoCs
  • Djvu Ransomware

    Ransomware which is a variant of the STOP family.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655.exe
    "C:\Users\Admin\AppData\Local\Temp\c60e49e6213d76f5552d909d6bfbfb8f8c266ca01ec4ac2e0547d10c0f976655.exe"
    1⤵
      PID:4760

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4760-1-0x0000000002250000-0x00000000022F0000-memory.dmp

      Filesize

      640KB

    • memory/4760-2-0x00000000023F0000-0x000000000250B000-memory.dmp

      Filesize

      1.1MB

    • memory/4760-3-0x0000000002250000-0x00000000022F0000-memory.dmp

      Filesize

      640KB