Analysis
-
max time kernel
0s -
max time network
83s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2024 05:39
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_22be022e24f27d436677a939b4eaadb6_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_22be022e24f27d436677a939b4eaadb6_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-01_22be022e24f27d436677a939b4eaadb6_cryptolocker.exe
-
Size
58KB
-
MD5
22be022e24f27d436677a939b4eaadb6
-
SHA1
72c9e0e87de4f0b24b10674a6237390572d53709
-
SHA256
539ac729c9153b9572bd2f08eac3ca707fafc88e64df7e4330b7452c0bb9ee35
-
SHA512
3cc3e5c60b8fadf945c41971faf2df2283a88504b04b47e0bbdc8696570b92f5e4d6e876cdda6ab7c1452af11ce79723d24b45599142fd6c30215d3efb6c3473
-
SSDEEP
1536:Tj+jsMQMOtEvwDpj5HmpJpOUHECgNMo0vp2EMT7t:TCjsIOtEvwDpj5HE/OUHnSMG
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_22be022e24f27d436677a939b4eaadb6_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_22be022e24f27d436677a939b4eaadb6_cryptolocker.exe"1⤵PID:2380
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"2⤵PID:3692
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
59KB
MD5a4a2e00d2d0707036556c8ca22a8a1df
SHA1d0b49ee1cdb30c38735cf0b22c86350e38fa3752
SHA256bb677c5fbe45e6995eafebdffae82c1e026e7b631fca0f3f03ad82bf10c69d76
SHA512da68405b7015435965a56ff411e8168245559080c018b847ca09490f39084857abbab52e6c7cec4f4bfc25af927b0181f72b98f268fd041e0d617b2ffb0cd243