Analysis

  • max time kernel
    0s
  • max time network
    66s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 06:01

General

  • Target

    2024-01-09_c8c078892035b74c0bb1d92705334034_cryptolocker.exe

  • Size

    42KB

  • MD5

    c8c078892035b74c0bb1d92705334034

  • SHA1

    52709b522d6c533ab118ea5367510529ff44bd80

  • SHA256

    4b017d35044178852f8a71a6edc6b7a3fba7ddab814ea1ff27464ad1ef2e4c9b

  • SHA512

    f1d7efc974d55dcc11192a9394036687490d9c83516c1566742b52a505ecd85fdcf308535b437e18444d99f288cb00c7c32b063f5582dd5b55829abb7d2b9377

  • SSDEEP

    768:wHGGaSawqnwjRQ6ESlmFOsPoOdQtOOtEvwDpjm6j4AYsqSh+DETkedm+YUta:YGzl5wjRQBBOsP1QMOtEvwDpjl39+D+K

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-09_c8c078892035b74c0bb1d92705334034_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-09_c8c078892035b74c0bb1d92705334034_cryptolocker.exe"
    1⤵
      PID:4392
      • C:\Users\Admin\AppData\Local\Temp\asih.exe
        "C:\Users\Admin\AppData\Local\Temp\asih.exe"
        2⤵
          PID:856

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/856-21-0x00000000005B0000-0x00000000005B6000-memory.dmp

              Filesize

              24KB

            • memory/856-19-0x0000000002070000-0x0000000002076000-memory.dmp

              Filesize

              24KB

            • memory/4392-0-0x0000000000500000-0x000000000050B000-memory.dmp

              Filesize

              44KB

            • memory/4392-1-0x0000000000520000-0x0000000000526000-memory.dmp

              Filesize

              24KB

            • memory/4392-3-0x0000000000640000-0x0000000000646000-memory.dmp

              Filesize

              24KB

            • memory/4392-2-0x0000000000520000-0x0000000000526000-memory.dmp

              Filesize

              24KB

            • memory/4392-17-0x0000000000500000-0x000000000050B000-memory.dmp

              Filesize

              44KB