Analysis
-
max time kernel
0s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
07-01-2024 12:12
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe
-
Size
60KB
-
MD5
7bdeb694cb572535fd0456e6ce2af6b4
-
SHA1
394f987fd71a858131fd73cbdacdc115f51fcb49
-
SHA256
7165f331f20f22b8e8e3e4faa2ccb7ac89eef45e353dd06e8b8cb454fe7b84f9
-
SHA512
06bdbd5038de33afef2b6a63989198f00d76d0a7a7c790e543133a4347cdff939b76ba6a8a4ed15ac30553a9e57721d135b0004aec038e428fbcafb998486a79
-
SSDEEP
1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSX:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7q
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe"1⤵PID:1092
-
C:\Users\Admin\AppData\Local\Temp\hurok.exe"C:\Users\Admin\AppData\Local\Temp\hurok.exe"2⤵PID:3264
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
MD50b36625554f0d37bd9f58152152dc98f
SHA181e036b08cfb9c8b1f459a1a9a51373188452f08
SHA2566b3fdca52f3a59683e44184d1c56bcafa708840351e5184373f98690bedc0030
SHA5121a378c372111b2b0e411e8659c125c0e342e119c4dae5c3e1f9028483f92d2ac915146ed8e9e259801e81c6dc2b95cd661aa899ef4ea6660f9fe74d9bf0bd0a7