Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25-04-2024 17:30
General
-
Target
2024-04-25_7012431beb1639564fc38e397d58c8bf_cryptolocker.exe
-
Size
62KB
-
MD5
7012431beb1639564fc38e397d58c8bf
-
SHA1
fe04c3d8d80026a9d5783c079acd7ab063f37475
-
SHA256
95a117fb31c8bfef895108444f6f2edd7a1431cd30805b2946d653c851be9391
-
SHA512
53e13340f51cf1792169469ab7e243d4b627b5bbcd7a426bef64c422a2198cb2959a3142cf32adad4ece61b3e347c90d849925e7e5418500052c74829fa3a1e9
-
SSDEEP
1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiJ:BbdDmjr+OtEvwDpjM8Q
Score
9/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 4 IoCs
-
UPX dump on OEP (original entry point) 5 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-25_7012431beb1639564fc38e397d58c8bf_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-25_7012431beb1639564fc38e397d58c8bf_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
62KB
MD57b3a6a33b3dfac0cb86be8b385d4a07b
SHA10d7a9f3a01c8c0a1dcd5dce14e05ac22180c24a4
SHA2564a4834354733d3b9e150d0bdaf477fc6592f06906c0b72b69153a3b9b8ad4f57
SHA5126f550bab2f614a1f50d9c30b6c80d632446d0bad3e1f47c18255ae3faf30f07e6eef4110884ef84ebf1db110630b675286f17707bf88827132c467f745303fb8
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
64KB