Analysis
-
max time kernel
0s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 06:50
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-08_f1e26e95e03a322a5fe863f00e851fda_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-08_f1e26e95e03a322a5fe863f00e851fda_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-08_f1e26e95e03a322a5fe863f00e851fda_cryptolocker.exe
-
Size
36KB
-
MD5
f1e26e95e03a322a5fe863f00e851fda
-
SHA1
b672640cadcc2bebc3990eb692c2c1214d47a0ba
-
SHA256
75a86d6e716693b547757feca1d60fc59910b2fe7d616a46aafb7938a16c5697
-
SHA512
026f9bf766c706c6adb88ad93640b938eb9d532d40a5ca65eb90cb3d62c7051b10723fe2dff7a1979c941795ba0ca6e8da750335df0229c70d5dc85ed14a2612
-
SSDEEP
768:UEEmoQDj/xnMp+yptndwe/PWQtOOtEvwDpjLenriO:ZzFbxmLPWQMOtEvwDpjLeriO
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"1⤵PID:5040
-
C:\Users\Admin\AppData\Local\Temp\2024-01-08_f1e26e95e03a322a5fe863f00e851fda_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-08_f1e26e95e03a322a5fe863f00e851fda_cryptolocker.exe"1⤵PID:1620