Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
12/03/2024, 01:59
General
-
Target
2024-03-12_d0cfd2f2743af7e4b957a19070947dc6_cryptolocker.exe
-
Size
78KB
-
MD5
d0cfd2f2743af7e4b957a19070947dc6
-
SHA1
65d7a6d2ffad3c2a00ad3e9a91327dd1755cccb7
-
SHA256
2d436efba394f856d9c7feaa7296331b8520b04c777018355a5ec794fbd39009
-
SHA512
ceaedec8b5cee8dd9d57ab977c353609b11b636ea136bd1aa49234ee0a15fb8179891904649dc19b6e2c387fb4518af4de8f040e2ff8a4a13ba3ea34e6c74b70
-
SSDEEP
768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7pBlqrr1HBJooSeKzu1adyB7jC:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyg
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 5 IoCs
-
UPX dump on OEP (original entry point) 5 IoCs
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE 1 IoCs
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-12_d0cfd2f2743af7e4b957a19070947dc6_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-12_d0cfd2f2743af7e4b957a19070947dc6_cryptolocker.exe"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
78KB
MD5858744f1f936f2dd4ecde28deac1e709
SHA1e9f704f4098a77d9a4e4192184e3ba3f3a75fdaa
SHA256bf598fd9b70eb946636242101cb694765e89731277e061846ce1249905ee105f
SHA5129ad6799b7af51c93a9b2def487ecffe4f2dd05bfe51608c5b85664e50c7c96c906b480b550d514071c3052640f563207e99bca8d80a2730654a7a52ae0cb255a
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB