Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
25/05/2024, 20:33
General
-
Target
2024-05-25_9b33fb874c3fbea11a2cb0ff5b472e12_cryptolocker.exe
-
Size
86KB
-
MD5
9b33fb874c3fbea11a2cb0ff5b472e12
-
SHA1
bcb2897f76a07d6d22ae917266589e14a46cf8dc
-
SHA256
acfcba0f206e62be4b98f9042235581a4fee6408542119f5d59d96c5fa6d8a40
-
SHA512
3fbc5b04fb0b5d46baeb423d196e08900cfdd2dd1c251d5ceb670d31ce9c587bae7dd718b07f3e3b64170e7ed5f9d0c9f0936468f721034c7967fffa18ba992e
-
SSDEEP
1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfWafHNBlk:vCjsIOtEvwDpj5H9YvQd2i
Score
9/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 1 IoCs
-
Detection of Cryptolocker Samples 1 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-25_9b33fb874c3fbea11a2cb0ff5b472e12_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-25_9b33fb874c3fbea11a2cb0ff5b472e12_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\misid.exe"C:\Users\Admin\AppData\Local\Temp\misid.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
86KB
MD58227ef32e167e1ae9a20c384b8e204d1
SHA171d8be260336dc926c097765c1b4d8a7824c55ad
SHA256718a3637954f982415b73179f711839f4274ab111ce0d4321bcf53f72d3f8ce5
SHA5121f359dfef5d455d6bb4b57d97da2e696e4489fdb83d9b85b02474317638675d0a36e73a65fc00f7b246f22fd66d1bfaa14d4558531a1573b1c9d9d2024cd2260
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB