Analysis

  • max time kernel
    0s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 05:43

General

  • Target

    2024-01-01_5f8f53767c14d41c1f272b355b0db5a7_cryptolocker.exe

  • Size

    89KB

  • MD5

    5f8f53767c14d41c1f272b355b0db5a7

  • SHA1

    90a027a4b6dbf61585950fda21154343c5a945b5

  • SHA256

    39a3fd0f035ce5b912ec029bfad7b0ac63dd2554024c473ccc882df6d6179c6c

  • SHA512

    144d2d40c70fd808a27fd128dd519a18784672a35447ac3bb37c921fcf81a8dc541da1c0ddae4606ce97485b92b147217916a8a8766f82897c38c9289adf7c21

  • SSDEEP

    1536:V6QFElP6n+gMQMOtEvwDpjQGYQbNcqamvWHShl/3S6:V6a+pOtEvwDpjtf

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-01_5f8f53767c14d41c1f272b355b0db5a7_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-01_5f8f53767c14d41c1f272b355b0db5a7_cryptolocker.exe"
    1⤵
      PID:2404
      • C:\Users\Admin\AppData\Local\Temp\asih.exe
        "C:\Users\Admin\AppData\Local\Temp\asih.exe"
        2⤵
          PID:872

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Users\Admin\AppData\Local\Temp\asih.exe

              Filesize

              89KB

              MD5

              cd25d56af44a2d811ff0e8e4060711b8

              SHA1

              e205ff8e7e479b01b67964717255f9f7371a2365

              SHA256

              e46f4618839af08f6517636f023201f39cfcc78c0aa6460ee219d3d93f38b29e

              SHA512

              6a74d5b0195e13c0908e851775b077cd35da14c41e66a0e7bcba27998a09686284a17cc20fe2c1e2dcbef7b1a899882b153deafc6808730edb22bb95ec5eb50d

            • memory/872-17-0x00000000006C0000-0x00000000006C6000-memory.dmp

              Filesize

              24KB

            • memory/872-23-0x00000000006A0000-0x00000000006A6000-memory.dmp

              Filesize

              24KB

            • memory/2404-1-0x00000000006E0000-0x00000000006E6000-memory.dmp

              Filesize

              24KB

            • memory/2404-2-0x0000000002230000-0x0000000002236000-memory.dmp

              Filesize

              24KB

            • memory/2404-0-0x00000000006E0000-0x00000000006E6000-memory.dmp

              Filesize

              24KB