Analysis
-
max time kernel
0s -
max time network
57s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2024 05:37
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe
-
Size
38KB
-
MD5
09427110a7a7103704fe0427abfade58
-
SHA1
002e46adb5d3177a0e41640ad9dbac0aecd2cd1e
-
SHA256
895144cc02b294db47a1e7ca1d3a6da816999a3582132664da408585f66afbd1
-
SHA512
7849be4ddd0d205cddd5abbb4251785a78aaa560192c073ac507ae8e3b0cca3c2b236e69af2157ea821d02d3a337ca54cdb1248be073d21ce760eda3bc50f03b
-
SSDEEP
768:b7o/2n1TCraU6GD1a4Xcn62TUdcuQlqJ51GPF3:bc/y2lm6Y0AqJ51y3
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_09427110a7a7103704fe0427abfade58_cryptolocker.exe"1⤵PID:1996
-
C:\Users\Admin\AppData\Local\Temp\rewok.exe"C:\Users\Admin\AppData\Local\Temp\rewok.exe"2⤵PID:2932
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD56d0c6cafb12dffc6d5c23db3ffc72b97
SHA1393e321ecf2bb72861ebb48c59d4d658a0bf0ccd
SHA25609a6b96ddb56cb35dc1aa6d28d0e134bd011eb96c76cfda7a33dc956515ebec1
SHA512257fb88d18d80e1e4f87c300b37f11a43ede59f0c2c79d260b1d2849a7772c76dfa5f0677499739ffa93b8941d5b2e7c13d1e1f268374e2ad06229e1b3a37b5c