Analysis

  • max time kernel
    0s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/01/2024, 06:01

General

  • Target

    2024-01-09_cbe73db63093ed2b487c7a0fdd521a9b_cryptolocker.exe

  • Size

    36KB

  • MD5

    cbe73db63093ed2b487c7a0fdd521a9b

  • SHA1

    bbefda87f95f99bb65d2c11289b834e281c99e06

  • SHA256

    622260be739345331bbfe6848afadc06c7f4aa9666f747f64e3fa55492d885fc

  • SHA512

    2b757355278ddefc531e47560f0b9836bb36581de6dc031e77cfed346c0b418d954eee7f6e41700a331efbc8e44889948acab1361e1985c8bb9894900106ff62

  • SSDEEP

    384:btBYQg/WIEhUCSNyepEjYnDOAlzVol6U/zzo+tkq4XDIwNiJXxXunrkwc:btB9g/WItCSsAGjX7e9N0hunrkj

Score
3/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-09_cbe73db63093ed2b487c7a0fdd521a9b_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-09_cbe73db63093ed2b487c7a0fdd521a9b_cryptolocker.exe"
    1⤵
      PID:3936
      • C:\Users\Admin\AppData\Local\Temp\gewos.exe
        "C:\Users\Admin\AppData\Local\Temp\gewos.exe"
        2⤵
          PID:224

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/224-21-0x0000000002120000-0x0000000002126000-memory.dmp

        Filesize

        24KB

      • memory/3936-0-0x0000000002EA0000-0x0000000002EA6000-memory.dmp

        Filesize

        24KB

      • memory/3936-2-0x0000000000400000-0x0000000000406000-memory.dmp

        Filesize

        24KB

      • memory/3936-1-0x0000000002EA0000-0x0000000002EA6000-memory.dmp

        Filesize

        24KB