Analysis
-
max time kernel
0s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
04-01-2024 15:13
General
-
Target
2024-01-03_1be932ce9c3b197201e2311e41d33004_cryptolocker.exe
-
Size
36KB
-
MD5
1be932ce9c3b197201e2311e41d33004
-
SHA1
3eca65bc8e1d9e32214f0cc0a09a78e00ab45257
-
SHA256
d9c3ece47f56ead85e8a7b2a34308ad4d78c6997ae9b919994081678c8b45d89
-
SHA512
9ffc009aed8d9ef8a3ad38cd79dd94b21fec92bd8bf567cb2daa1c47b75914f67ee5cfdc32bd18f67a5fe9fb1a7722a6dd9d782e1cb9f8f0579095480a0db7f0
-
SSDEEP
384:bgX4uGLLQRcsdeQ7/nQu63Ag7YmecFanrlwfjDUkKDfWf0w3sp8u5cZ9sR:bgX4zYcgTEu6QOaryfjqDDw3sCu5ZR
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-03_1be932ce9c3b197201e2311e41d33004_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-03_1be932ce9c3b197201e2311e41d33004_cryptolocker.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\hasfj.exe"C:\Users\Admin\AppData\Local\Temp\hasfj.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
35KB
MD56588541299dddc7ce09e56dc632de68e
SHA189ef4851eb62bd943d01df7a0e4d27ccf0e08f4d
SHA256fd220cdf77a4a918145826eee3efc02c4e6563efb3399e7e26485f98eba2e7f7
SHA512ecb128329f93922d94d65b8094a9a380fb6f7c9d39641c43266142e154324122512f0a8d5f13a40b3feb39691f48149e44ad3fde159a178840eb94122411b46f
-
Filesize
37KB
MD5a8567e00569910fedbbfe25540f2fa0f
SHA1a8929277238aa143f37ab946d088715076bfaf4b
SHA256ead2ce6df33a8a5939a8dc535332bfa4cb7a5b67aa3bf084097b5397a7222948
SHA512996dfa58b65b9055b4f0617fc65afa9e9ba537911c1299a4a90fef7c3cab869d6ffec23b87151e3be2fc7554138b11ce1d5c343ddc38c081f27b58ccfb26bed8
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB