Analysis

  • max time kernel
    153s
  • max time network
    171s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231020-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-10-2023 21:16

General

  • Target

    ef3c260fed0a71f0e679261aeb242133899f9ff03d68b5f95711a66ef919e549.exe

  • Size

    189KB

  • MD5

    d8f3b153f6635d4257aa9de8cf5a0ef4

  • SHA1

    6502eaaecc168dd58fd7efca671f15734e12f958

  • SHA256

    ef3c260fed0a71f0e679261aeb242133899f9ff03d68b5f95711a66ef919e549

  • SHA512

    2fcc85ba83d1fe07950a649834866c3c5d51df5cbf65356f24d219b3ef35741a5a08fa7d62c2ced7302b5b0930047dfecce60caf74eb73ad5c21d48dd35d92e7

  • SSDEEP

    3072:qV8CZflmqu3ZJ9f1hzILPN54cuuu+meBwHAS//XpC2sk9PqcRxBCXfD2fS2zOy:qqChOZJt1hsLPN54cuuu+ZBDe/Bsk9DP

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\ef3c260fed0a71f0e679261aeb242133899f9ff03d68b5f95711a66ef919e549.exe
    "C:\Users\Admin\AppData\Local\Temp\ef3c260fed0a71f0e679261aeb242133899f9ff03d68b5f95711a66ef919e549.exe"
    1⤵
      PID:2412

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2412-0-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-1-0x0000000002180000-0x0000000002181000-memory.dmp
      Filesize

      4KB

    • memory/2412-2-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-4-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-7-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-9-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-12-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-14-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-15-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-16-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB

    • memory/2412-18-0x0000000000400000-0x0000000000433000-memory.dmp
      Filesize

      204KB