Analysis
-
max time kernel
0s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
09-01-2024 06:35
General
-
Target
2024-01-08_014fbfebf8de09ef846d5216e9fadcc2_cryptolocker.exe
-
Size
101KB
-
MD5
014fbfebf8de09ef846d5216e9fadcc2
-
SHA1
35329aab0b5a0057aac59a4fd18e9e039ba20891
-
SHA256
060dca9699bf8acbb28878fce7a16d42b8df1ceaddcd25ff5a88cf51439999d7
-
SHA512
e8612449155ce4a2b52b079c8672e78621306960a8442c1244f732fe434521f0fb89ff25db3c30e3c629721f1ed8f6a13dce6e8f475e63ed4cc07afa5f0d7075
-
SSDEEP
1536:qkmnpomddpMOtEvwDpjJGYQbN/PKwNgpwqWsviP1I:AnBdOOtEvwDpj6zI
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-08_014fbfebf8de09ef846d5216e9fadcc2_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-08_014fbfebf8de09ef846d5216e9fadcc2_cryptolocker.exe"1⤵
- Checks computer location settings
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
60KB