Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
11/01/2024, 08:49
General
-
Target
53121da0e60c4ee00a0550e86403b123.exe
-
Size
455KB
-
MD5
53121da0e60c4ee00a0550e86403b123
-
SHA1
de7cf328ad3100030f55ac9b1d5a77a751b2aa8a
-
SHA256
17557537bcb33f2a0ad3ff0caf7b084e63468144b2e6cb8180f6598adfdc5c9a
-
SHA512
5b2b6fa46a646eddeb96e452fe56f543bdab268f2c9d7d1c3eafd70635127cbc4885714471e996785bfeafdf8570d618361f2c161381c77c4f597db8c8870c69
-
SSDEEP
3072:b1JXog0BEy3YXZt1pfDhxi2YcRVm16Pn6tpz/CKhz9i2YcRPm16Pn6ckCwi2YcRK:jyYxiWm16Mqu5iym16rwiRmU6c
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\53121da0e60c4ee00a0550e86403b123.exe"C:\Users\Admin\AppData\Local\Temp\53121da0e60c4ee00a0550e86403b123.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
472KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
512KB