Analysis

  • max time kernel
    0s
  • max time network
    57s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05-01-2024 05:37

General

  • Target

    2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe

  • Size

    38KB

  • MD5

    09427110a7a7103704fe0427abfade58

  • SHA1

    002e46adb5d3177a0e41640ad9dbac0aecd2cd1e

  • SHA256

    895144cc02b294db47a1e7ca1d3a6da816999a3582132664da408585f66afbd1

  • SHA512

    7849be4ddd0d205cddd5abbb4251785a78aaa560192c073ac507ae8e3b0cca3c2b236e69af2157ea821d02d3a337ca54cdb1248be073d21ce760eda3bc50f03b

  • SSDEEP

    768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51GPF3:bc/y2lm6Y0AqJ51y3

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe"
    1⤵
      PID:1996
      • C:\Users\Admin\AppData\Local\Temp\rewok.exe
        "C:\Users\Admin\AppData\Local\Temp\rewok.exe"
        2⤵
          PID:2932

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\rewok.exe

        Filesize

        1KB

        MD5

        6d0c6cafb12dffc6d5c23db3ffc72b97

        SHA1

        393e321ecf2bb72861ebb48c59d4d658a0bf0ccd

        SHA256

        09a6b96ddb56cb35dc1aa6d28d0e134bd011eb96c76cfda7a33dc956515ebec1

        SHA512

        257fb88d18d80e1e4f87c300b37f11a43ede59f0c2c79d260b1d2849a7772c76dfa5f0677499739ffa93b8941d5b2e7c13d1e1f268374e2ad06229e1b3a37b5c

      • memory/1996-0-0x0000000002350000-0x0000000002356000-memory.dmp

        Filesize

        24KB

      • memory/1996-2-0x0000000000400000-0x0000000000406000-memory.dmp

        Filesize

        24KB

      • memory/1996-1-0x0000000002350000-0x0000000002356000-memory.dmp

        Filesize

        24KB

      • memory/2932-20-0x00000000006E0000-0x00000000006E6000-memory.dmp

        Filesize

        24KB