Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
21-05-2024 15:41
General
-
Target
2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker.exe
-
Size
36KB
-
MD5
08abdb9662f0e4c4e64377c3cb8d71bb
-
SHA1
18d52529feaffceb09d6feacf3c57639e961401c
-
SHA256
e98c3eeeeb99f3691ef90ac21cc8ae1778257e8ab2b352e7d91689332bb9a0a6
-
SHA512
4410c27d8dc61170283d47a9febbe775a0e0e6447c51082329b4da513d0b94ad9ac5ff9b519a2243d09bea4ef7c47c47fe1615ed8b467104f6ac9d15d455944d
-
SSDEEP
384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIunIVpeNs23mAA6lx+Z4:bA74zYcgT/Ekd0ryfjPIunqpeNswm6+i
Score
9/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-21_08abdb9662f0e4c4e64377c3cb8d71bb_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\hasfj.exe"C:\Users\Admin\AppData\Local\Temp\hasfj.exe"2⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
36KB
MD549d20b9336c5eab6ad4d814cb0b99a7a
SHA13a6cb86a87e52e786dc9efaa974a12c03499cb95
SHA2563d75d00dd4e81811c64fb43a8a32003a0e936cfdee086f5589674f50b636afc0
SHA512ce2b1bb2ab8767400075b83cdd0897b5a330d1c2eedc11056a9d521f223bd6f159a2419555dfc649e6ed018e520338e3e7e18153fb5bc70edb586f4cba873ec9
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB