Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26/03/2024, 03:47
General
-
Target
2024-03-26_812bc7706455d9e0c0807d565b528f98_cryptolocker.exe
-
Size
46KB
-
MD5
812bc7706455d9e0c0807d565b528f98
-
SHA1
52e1b2dd8535a5dac173fea70848e36e2d56d749
-
SHA256
02e84c0ed8b24fb2c7721eddb936902c1d2c5e0986afa80b13145a3054c43710
-
SHA512
3997c12582ecc2098ceee9af9be13930ef521ae910d481b5e156236219ddaebfda752cefd88c92a6dc94be7483411834efb96b0cfa002fa46b1e1863117b51c8
-
SSDEEP
768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvP7DMEgC:6j+1NMOtEvwDpjr8hP7DM2
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 5 IoCs
-
Detects executables built or packed with MPress PE compressor 5 IoCs
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-26_812bc7706455d9e0c0807d565b528f98_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-26_812bc7706455d9e0c0807d565b528f98_cryptolocker.exe"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
47KB
MD546e32f3913c3ed5d8edc3132d45c6bd1
SHA127bbff0ee1151df398bd97dedc4674bd3c0a5ecb
SHA2562e47156470916dad51f5f4676ea90c7035c16237ab40d3bd0ef003b8ed760ede
SHA51211c0b1e19cd4d2bc3362c17dc0dbd38f5b1f6baf76e996250d14f8bc275feaa9d7fa177d12c047e46f129e0c280392ac84d96019c4496c4becfdaba51282f2cb
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB
-
Filesize
60KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
60KB