Analysis
-
max time kernel
0s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 05:50
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_c31cfb8d6d321d50c65864fb5af119b8_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_c31cfb8d6d321d50c65864fb5af119b8_cryptolocker.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-01_c31cfb8d6d321d50c65864fb5af119b8_cryptolocker.exe
-
Size
39KB
-
MD5
c31cfb8d6d321d50c65864fb5af119b8
-
SHA1
0eae6d9d4deda3e92825406e050604377248f50d
-
SHA256
f5bcb5d8ea6fb9dc7e98a129085376f75d5ab6104e0d9ee16560037ef72d2884
-
SHA512
d47f779d2e0a93062d880173e291dfc7b4dae36b3fa89539d2b1439ec0a75dccfa0a9052abf8bf3679b809497a7bb0283c58c78b331843303ec68545a7295a5d
-
SSDEEP
768:bIDOw9UiaCHfjnE0Sf88AvvP1oghYvm9/6DyUML:bIDOw9a0Dwo3P1ojvUSDhw
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_c31cfb8d6d321d50c65864fb5af119b8_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_c31cfb8d6d321d50c65864fb5af119b8_cryptolocker.exe"1⤵PID:3316
-
C:\Users\Admin\AppData\Local\Temp\lossy.exe"C:\Users\Admin\AppData\Local\Temp\lossy.exe"2⤵PID:4548
-