Analysis
-
max time kernel
0s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12/01/2024, 06:02
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_909edf0fff6b546f7951530a5b3ba574_cryptolocker.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_909edf0fff6b546f7951530a5b3ba574_cryptolocker.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-11_909edf0fff6b546f7951530a5b3ba574_cryptolocker.exe
-
Size
123KB
-
MD5
909edf0fff6b546f7951530a5b3ba574
-
SHA1
243f28ed3a649973079a21948ecab2fc1b2c6f57
-
SHA256
33e145bc5123f5e2495d5eb92799ba017d64f815a7c6dd6e34be69a1d340e974
-
SHA512
ae11dc3e30b1c6da1e949be0971d67f1991671df11536e2ca417140e44a2204c4d99ea4fe2da430cbd1cf812f1d2c4d1bf3da2d05c01fb8fe2ca30878f80fc7a
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBKLUYOVbvh//l:vCjsIOtEvwDpj5H9YvQd2RL
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-11_909edf0fff6b546f7951530a5b3ba574_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-11_909edf0fff6b546f7951530a5b3ba574_cryptolocker.exe"1⤵PID:5052
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"2⤵PID:4088
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
123KB
MD56109d7a71c06fc80eaa45d688cc3f7e1
SHA14eba7c7b8a04a9aff4363dd6401b5825d7605fea
SHA2563775812466fd65c403a0814eb7bce2c984ea9a520637c37542787ef66f328f5b
SHA512eaad3a90edde50502467d4ac093178907dfd1ecc1b25dd0b00bf81f469d4c89a653d7b87ab04b545174d9902da8f7baad655ef92ad64228ef12c84d0f81247a9