babfd59aef95089ddcbe76a22b7e499cbfe9e29669cebd64697ce17d356ee37f

Analysis

max time kernel
143s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
22/04/2024, 20:43

Target

2024-04-22_c6f57aa40c2661db3b75c1d80475ac95_cryptolocker.exe
Size

31KB
MD5

c6f57aa40c2661db3b75c1d80475ac95
SHA1

b77e3eb0d1055b74ec39920c9035ee39fa9127c2
SHA256

babfd59aef95089ddcbe76a22b7e499cbfe9e29669cebd64697ce17d356ee37f
SHA512

f513d3f6843c70cb3a5f080a5ba3cd8392effe940f4dc6fd9c4b0b53f5697116191997860ad74aa6628260f916cb33ecb374ce16b95612bbab7da29f164e76f2
SSDEEP

768:KEEmoQDj/xnMp+yptndwe/PBQtOOtEvwDpjhQzfYhfyYP:/zFbxmLPBQMOtEvwDpjhVyG

Score

9^/10

Detection of CryptoLocker Variants 2 IoCs

resource	yara_rule
behavioral2/memory/4304-0-0x0000000000500000-0x000000000050C000-memory.dmp	CryptoLocker_rule2
behavioral2/memory/4304-2-0x0000000000500000-0x000000000050C000-memory.dmp	CryptoLocker_rule2

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	4304	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\2024-04-22_c6f57aa40c2661db3b75c1d80475ac95_cryptolocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-22_c6f57aa40c2661db3b75c1d80475ac95_cryptolocker.exe"
1⤵
PID:4304
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4304 -s 272
  2⤵
  - Program crash
  PID:2316

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4304 -ip 4304
1⤵
PID:216

memory/4304-0-0x0000000000500000-0x000000000050C000-memory.dmp

Filesize
48KB

Download
memory/4304-1-0x00000000004F0000-0x00000000004F3000-memory.dmp

Filesize
12KB

Download
memory/4304-2-0x0000000000500000-0x000000000050C000-memory.dmp

Filesize
48KB

Download