1619d3bb9faa56a025c1f95a418714bc5982d46d4ba14e3862a2529d8455c755

Analysis

max time kernel
1s
max time network
32s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 05:35

Target

2024-02-24_3fdff9ffd4aa6954eb134a037dedbbba_cryptolocker.exe
Size

33KB
MD5

3fdff9ffd4aa6954eb134a037dedbbba
SHA1

e8bbfe6d4fefad4933f3aabce32023b644f8fedc
SHA256

1619d3bb9faa56a025c1f95a418714bc5982d46d4ba14e3862a2529d8455c755
SHA512

25fdf99788446a9dafc9fd829585a42eb7e2caa34f4739b5c543644786d8ee0b95728e3b0f356bce5fe5e108be3fef8e699d7a114653786585e00b0cfda94517
SSDEEP

768:fTz7y3lhsT+hs1SQtOOtEvwDpjfAu9+451:fT+hsMQMOtEvwDpjoIH51

Score

9^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
behavioral2/files/0x00070000000231eb-12.dat	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

resource	yara_rule
behavioral2/files/0x00070000000231eb-12.dat	CryptoLocker_set1

C:\Users\Admin\AppData\Local\Temp\2024-02-24_3fdff9ffd4aa6954eb134a037dedbbba_cryptolocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-24_3fdff9ffd4aa6954eb134a037dedbbba_cryptolocker.exe"
1⤵
PID:448
- C:\Users\Admin\AppData\Local\Temp\misid.exe
  "C:\Users\Admin\AppData\Local\Temp\misid.exe"
  2⤵
  PID:3476

C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
33KB

MD5
97c669dc7fc9de08ab432a22fdb6a44f

SHA1
250754b8c6afc8e35c84eae714a5a98c0112f252

SHA256
a169cb2a2445dc41a63f43e73aaf47284db76c77c35ee9e87d16f23d75b9e2a4

SHA512
0ac4ab6c87fc3f1d0c0c0ec8892ce9f67c59dcc1f7eb795b6fbc9d646f31065ae91dad23df9dd4d54709dd1b92cd1dfe35147602f67fc1780558ccd4c5eeec83

Download Submit
memory/448-0-0x00000000006B0000-0x00000000006B6000-memory.dmp

Filesize
24KB

Download
memory/448-1-0x00000000006B0000-0x00000000006B6000-memory.dmp

Filesize
24KB

Download
memory/448-2-0x00000000006D0000-0x00000000006D6000-memory.dmp

Filesize
24KB

Download