Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-02-2024 00:24

General

  • Target

    2024-02-22_08d212a195f1f99fb1ff9da6ef9c5e72_cryptolocker.exe

  • Size

    100KB

  • MD5

    08d212a195f1f99fb1ff9da6ef9c5e72

  • SHA1

    d1c0d28b21d5eafe4325466cd9e5960c7c1c43a1

  • SHA256

    f4d66a939e10e99d81ea47e2673257b5b9dc6b0e52a023749606d3904259837d

  • SHA512

    755b841351650ccbcb9a82c540ca01bf6749a6c23b7dedc797770e69928ebcebf7233cba220bbc104044ca48651b0133e0135627863cda2119f1011b9365982d

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28L:xj+VGMOtEvwDpjubwQEIiVmkxv/wL

Score
9/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 2 IoCs
  • Detection of Cryptolocker Samples 2 IoCs
  • Detects executables built or packed with MPress PE compressor 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-22_08d212a195f1f99fb1ff9da6ef9c5e72_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-22_08d212a195f1f99fb1ff9da6ef9c5e72_cryptolocker.exe"
    1⤵
      PID:1980

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1980-0-0x0000000000500000-0x0000000000510000-memory.dmp

      Filesize

      64KB

    • memory/1980-1-0x00000000001D0000-0x00000000001D6000-memory.dmp

      Filesize

      24KB

    • memory/1980-2-0x0000000000470000-0x0000000000476000-memory.dmp

      Filesize

      24KB

    • memory/1980-3-0x00000000001D0000-0x00000000001D6000-memory.dmp

      Filesize

      24KB

    • memory/1980-6-0x0000000000500000-0x0000000000510000-memory.dmp

      Filesize

      64KB