Analysis

  • max time kernel
    0s
  • max time network
    140s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-01-2024 12:12

General

  • Target

    2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe

  • Size

    60KB

  • MD5

    7bdeb694cb572535fd0456e6ce2af6b4

  • SHA1

    394f987fd71a858131fd73cbdacdc115f51fcb49

  • SHA256

    7165f331f20f22b8e8e3e4faa2ccb7ac89eef45e353dd06e8b8cb454fe7b84f9

  • SHA512

    06bdbd5038de33afef2b6a63989198f00d76d0a7a7c790e543133a4347cdff939b76ba6a8a4ed15ac30553a9e57721d135b0004aec038e428fbcafb998486a79

  • SSDEEP

    1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x/9lfL+gniDSX:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7q

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-06_7bdeb694cb572535fd0456e6ce2af6b4_cryptolocker.exe"
    1⤵
      PID:1092
      • C:\Users\Admin\AppData\Local\Temp\hurok.exe
        "C:\Users\Admin\AppData\Local\Temp\hurok.exe"
        2⤵
          PID:3264

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\hurok.exe

        Filesize

        60KB

        MD5

        0b36625554f0d37bd9f58152152dc98f

        SHA1

        81e036b08cfb9c8b1f459a1a9a51373188452f08

        SHA256

        6b3fdca52f3a59683e44184d1c56bcafa708840351e5184373f98690bedc0030

        SHA512

        1a378c372111b2b0e411e8659c125c0e342e119c4dae5c3e1f9028483f92d2ac915146ed8e9e259801e81c6dc2b95cd661aa899ef4ea6660f9fe74d9bf0bd0a7

      • memory/1092-2-0x0000000000400000-0x0000000000406000-memory.dmp

        Filesize

        24KB

      • memory/1092-1-0x00000000006E0000-0x00000000006E6000-memory.dmp

        Filesize

        24KB

      • memory/1092-0-0x00000000006E0000-0x00000000006E6000-memory.dmp

        Filesize

        24KB

      • memory/3264-25-0x0000000000490000-0x0000000000496000-memory.dmp

        Filesize

        24KB