Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
14-03-2024 15:54
General
-
Target
2024-03-14_dfb4ac16425e2f12735c242bda7eef7b_cryptolocker.exe
-
Size
62KB
-
MD5
dfb4ac16425e2f12735c242bda7eef7b
-
SHA1
220e825ee0b842a1235c010720666cfc2509ade4
-
SHA256
d94fc981862bc36a064b2b5b1549a1a9132367eed62c3182e05f28b9b095eb4b
-
SHA512
84272b78e2673675372f459df94027c32eff8159ca874e5297cd20b4c9a2314d0308863cdf36b1c704c5a91786b2253899416a89459b0e3e622998aaf98e9cc2
-
SSDEEP
1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLZ/xblzT:X6a+SOtEvwDpjBrOP
Score
9/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
-
Detection of Cryptolocker Samples 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-14_dfb4ac16425e2f12735c242bda7eef7b_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-14_dfb4ac16425e2f12735c242bda7eef7b_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
62KB
MD5e4d0fb753da7d6bb2530f9a8887c86ad
SHA1150753e32e0ef74ee7a1a42fd0101312be887bab
SHA256af22ff3c264e1a17267696e127dbeb9593b74a26cf4dc3afdfa87c43df5d5d9e
SHA5122ba1d6524b03b4810ab68cf557391818bab857cad6f955490abc4329f9c8d9c86fb515e5ab6ad934e2e1aa6924c203e97c31727cdfe73ed08e33dd05f3c4281e
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB