Analysis

  • max time kernel
    20s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/01/2024, 05:45

General

  • Target

    2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe

  • Size

    41KB

  • MD5

    80193361f8eb17ca96007aa778d470a7

  • SHA1

    478ee6a11df47b037b63f72aae8bc4339cad977a

  • SHA256

    9703b362caf1b570eda5d86f79359935d4a4d5e1eaf378d23fc6fe2e346f51ad

  • SHA512

    f497969f9160d8c0d899b054f94b390d981f0b218e2c1676fa59ab50f8b92ed167dbab7928690ed2c9c82bb2eb566db0b78e7d07a677b0f83fc21c857b3c0ca9

  • SSDEEP

    384:e/4wODQkzonAYsju5N/surDQtOOtEvwDpjqIGROqS/WccJVJwi2B5cG:79inqyNR/QtOOtEvwDpjBKccJVODvcG

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-01_80193361f8eb17ca96007aa778d470a7_cryptolocker.exe"
    1⤵
      PID:916
      • C:\Users\Admin\AppData\Local\Temp\asih.exe
        "C:\Users\Admin\AppData\Local\Temp\asih.exe"
        2⤵
          PID:1812

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        42KB

        MD5

        89bef6794943946443bf0ac52507f86a

        SHA1

        b66e885ea71f557d3f5208e52371b6f744e0f8d9

        SHA256

        d9cb0029f587328ed3a6132f07b095a500aa01d3920e8d6ceaa9d3e2c2103645

        SHA512

        2f1c39a1d507f29d9ef1177d7cce0cfe9f7ebbd9d955493c127832eaa59ea5525e1ad6731cca66fd157f342b664c00834f67e207887dd21a4fc379839e97b9a0

      • C:\Users\Admin\AppData\Local\Temp\asih.exe

        Filesize

        33KB

        MD5

        116adfe978d6e7032a73b7add1363c64

        SHA1

        42cb2a23a9b5cc3f055297335801963d472221ca

        SHA256

        d7bed0ab533e0dd9799fbfc1059314dbbf3ed3a80c85a2309b6fdfad312d9287

        SHA512

        574aa96f45aa5396908591777052da2d58633347dc004a3073dcf6e9d8a4a2569cdbe698759023b350452ffc0bdb58e61fc1ad9745dc7e53dc7cf9f748ff3d67

      • memory/916-0-0x0000000000500000-0x000000000050F000-memory.dmp

        Filesize

        60KB

      • memory/916-1-0x0000000000520000-0x0000000000526000-memory.dmp

        Filesize

        24KB

      • memory/916-3-0x0000000000540000-0x0000000000546000-memory.dmp

        Filesize

        24KB

      • memory/916-2-0x0000000000520000-0x0000000000526000-memory.dmp

        Filesize

        24KB

      • memory/916-17-0x0000000000500000-0x000000000050F000-memory.dmp

        Filesize

        60KB

      • memory/1812-19-0x00000000006D0000-0x00000000006D6000-memory.dmp

        Filesize

        24KB

      • memory/1812-25-0x0000000000660000-0x0000000000666000-memory.dmp

        Filesize

        24KB