Analysis
-
max time kernel
27s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04/01/2024, 15:13
General
-
Target
2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker.exe
-
Size
31KB
-
MD5
1509c8b0d36cb88c928b303053f3bfd2
-
SHA1
18ca2dbf299853522d1e8824f6b92030b4baa266
-
SHA256
043ae25272d703c92ddd18e33fd74f10d144b90690368041e2af0d3311c799e3
-
SHA512
47fc86245f3c46d970861dbc5387ce9f88997c0ca995d9370e6fb94bdeec1ee0f62d38ceaa0c43a8dd0f63c25e105e0ae37ec974227ac7ab1447ac8e29c4eda1
-
SSDEEP
768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5a1:qUmnpomddpMOtEvwDpjjaYa1
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-03_1509c8b0d36cb88c928b303053f3bfd2_cryptolocker.exe"1⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31KB
MD5353ab565404d59ff985e84c3b64491d3
SHA14b59c56b12b4708c48ddf164dfa4f40307d7258f
SHA2560af426cadf3c3030def617a7c6c86e3309b4e7c61f97a56ed7c78260dcc88493
SHA512951abab6fe8bc138436620cb8047ab2a82199a90a83f08f02277b871a7b611d286bdd4aea6c01f510c83b1e99c6e21b28abf4c70879e085e7f84f233574d25a1
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB