Analysis
- max time kernel
141s - max time network
131s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
22/12/2023, 00:14
General
- Target 32bc94e84b62757e7b77c7deb0a96f2f.exe
- Size 1.1MB
- Sample231222-ajelcsgfd4
- SHA256 ada028c99efb8e8759c0b0622bf368279f7d8f8e7baad8a58cd195c65422a767
Score
10/10
Malware Config
Signatures
- clop
Ransomware discovered in early 2019 which has been actively developed since release.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\32bc94e84b62757e7b77c7deb0a96f2f.exe"C:\Users\Admin\AppData\Local\Temp\32bc94e84b62757e7b77c7deb0a96f2f.exe"1⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3108-0-0x0000000000900000-0x0000000000901000-memory.dmp
memory/3108-1-0x0000000002A80000-0x0000000002B38000-memory.dmp
memory/3108-2-0x0000000000400000-0x0000000000527000-memory.dmp