Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
17/02/2024, 22:55
General
-
Target
2024-02-17_a59c7268dabdb68f7901a91ecc6d42d3_cryptolocker.exe
-
Size
44KB
-
MD5
a59c7268dabdb68f7901a91ecc6d42d3
-
SHA1
1088b7dadcba521d94149ecb6924bcffbe7bc426
-
SHA256
cbc6f31442b7b1a15bc34d1f7c0f0067e790d125058244626d7907ceb8c8c644
-
SHA512
adc1b88c4314c7bf59b45c0650a9f123475283addfc685c55332c0e4fdc3159ac7d58e6469252fc79bbcc4a44fe54ba216c97dc5785f39fa3c5bb3d77b6ee90a
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05Wpd:qmbhXDmjr5MOtEvwDpj5cDtKkQZQC
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 3 IoCs
-
UPX dump on OEP (original entry point) 5 IoCs
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-17_a59c7268dabdb68f7901a91ecc6d42d3_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-17_a59c7268dabdb68f7901a91ecc6d42d3_cryptolocker.exe"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
MD56a3b5d24532b65a50db63f565a92e658
SHA1e2384fd020e764671059a8f2492dc21caa568ba4
SHA256063c161e14a1a89e067730fad96e57154685b9c4d78db41989d9556a67d61ddc
SHA512498ef7c7fda31d9040c9b4df9bcaaa1e7eb0805497ab895b79432d8f031a6c29a73ceb8f1d7e005aad3072a115b1ed5f2e1bef483523b94ce87617c492101370
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB