Analysis

  • max time kernel
    146s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-03-2024 20:19

General

  • Target

    Ransomware/EternalRocks.exe

  • Size

    5.0MB

  • MD5

    53f23e72664dc9efd4251ba1b120d932

  • SHA1

    5e033b70775429fb6a5c2f40435984526f3a4ca1

  • SHA256

    3b4497c7f8c89bf22c984854ac7603573a53b95ed147e80c0f19e549e2b65693

  • SHA512

    fad16aeff2bc7ff24eba061167769d40ef228fc986c3a6ca3cabb5e42625bd22a7a9745cabe551b089d8361305f92bc1786b40e2f00d185a9e524e0935f867f5

  • SSDEEP

    98304:SX/pvSmTsOmMpu5l/sB0seyAp/QszFjXEKZFbr0vKPMKznq:EBvpsOmX5ly0sbAtVXEKZF+sVq

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ransomware\EternalRocks.exe
    "C:\Users\Admin\AppData\Local\Temp\Ransomware\EternalRocks.exe"
    1⤵
      PID:2856

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2856-0-0x00007FFDFBDC0000-0x00007FFDFC761000-memory.dmp

      Filesize

      9.6MB

    • memory/2856-1-0x0000000001620000-0x0000000001630000-memory.dmp

      Filesize

      64KB

    • memory/2856-2-0x00007FFDFBDC0000-0x00007FFDFC761000-memory.dmp

      Filesize

      9.6MB

    • memory/2856-3-0x000000001BB70000-0x000000001BF9E000-memory.dmp

      Filesize

      4.2MB

    • memory/2856-4-0x000000001C750000-0x000000001CC1E000-memory.dmp

      Filesize

      4.8MB

    • memory/2856-79-0x000000001D8E0000-0x000000001DDEE000-memory.dmp

      Filesize

      5.1MB

    • memory/2856-80-0x000000001DE90000-0x000000001DF2C000-memory.dmp

      Filesize

      624KB

    • memory/2856-81-0x0000000001620000-0x0000000001630000-memory.dmp

      Filesize

      64KB

    • memory/2856-82-0x00000000015E0000-0x00000000015E8000-memory.dmp

      Filesize

      32KB

    • memory/2856-83-0x00007FFDFBDC0000-0x00007FFDFC761000-memory.dmp

      Filesize

      9.6MB

    • memory/2856-84-0x0000000001620000-0x0000000001630000-memory.dmp

      Filesize

      64KB