Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23/02/2024, 12:36
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2024-02-23_5140a61814d7ddb0f1b9055e660ea6db_cryptolocker.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-02-23_5140a61814d7ddb0f1b9055e660ea6db_cryptolocker.exe
Resource
win10v2004-20240221-en
7 signatures
150 seconds
General
-
Target
2024-02-23_5140a61814d7ddb0f1b9055e660ea6db_cryptolocker.exe
-
Size
63KB
-
MD5
5140a61814d7ddb0f1b9055e660ea6db
-
SHA1
ec1d7425db12e3d7d6e9a72c13665541d7b0822c
-
SHA256
84f932307c95033911d31e2fbf258fa522fa1eafc5f32830acdcef11ac111405
-
SHA512
f74b7214cec6e902e803300f839acb626c2b0df32fe42cd96beb0688eb22eca26cf58d1ccd7dec78e7e42d99486e4e4e4828d3bb5773b21433444339af1899ec
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEMI:6j+1NMOtEvwDpjr8ox8UDEB
Score
9/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 2 IoCs
resource yara_rule behavioral1/memory/2184-0-0x0000000000500000-0x000000000050F000-memory.dmp CryptoLocker_rule2 behavioral1/memory/2184-5-0x0000000000500000-0x000000000050F000-memory.dmp CryptoLocker_rule2 -
Detection of Cryptolocker Samples 2 IoCs
resource yara_rule behavioral1/memory/2184-0-0x0000000000500000-0x000000000050F000-memory.dmp CryptoLocker_set1 behavioral1/memory/2184-5-0x0000000000500000-0x000000000050F000-memory.dmp CryptoLocker_set1 -
Detects executables built or packed with MPress PE compressor 2 IoCs
resource yara_rule behavioral1/memory/2184-0-0x0000000000500000-0x000000000050F000-memory.dmp INDICATOR_EXE_Packed_MPress behavioral1/memory/2184-5-0x0000000000500000-0x000000000050F000-memory.dmp INDICATOR_EXE_Packed_MPress