Analysis

  • max time kernel
    135s
  • max time network
    104s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-05-2024 06:43

General

  • Target

    6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0.exe

  • Size

    6.0MB

  • MD5

    b60ea71b7edf7afa6cfb09a02709407c

  • SHA1

    5f97a95cc05036e9c030583c2ee5648229cc9160

  • SHA256

    6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0

  • SHA512

    03a3d78fd9397523f794710f965c8c388c482ad5c9bef459efedcc8dc24b30f9df5c35f9b572c7b9d6a1e13cedd9af68af8e935d300438f5efdd7144b4685a3f

  • SSDEEP

    98304:5DYEWTnV7e9yUXMJ/1o1gLWMV99zw0RlPB6I/KIxAQGT1A0AWYOTsKkXHr:5UEWTnVyAnOzMVjH6WKQG5A0SKCL

Score
10/10

Malware Config

Signatures

  • clop

    Ransomware discovered in early 2019 which has been actively developed since release.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0.exe
    "C:\Users\Admin\AppData\Local\Temp\6b468da05c8f7be6bfa2b29de2408926e8cfc6c1c6a0cd59eaedde72aaab4aa0.exe"
    1⤵
      PID:4664

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4664-0-0x0000000000400000-0x0000000000992000-memory.dmp

      Filesize

      5.6MB

    • memory/4664-1-0x00000000026D0000-0x0000000002799000-memory.dmp

      Filesize

      804KB

    • memory/4664-4-0x0000000000400000-0x0000000000992000-memory.dmp

      Filesize

      5.6MB

    • memory/4664-5-0x0000000000400000-0x0000000000992000-memory.dmp

      Filesize

      5.6MB

    • memory/4664-3-0x0000000000400000-0x0000000000992000-memory.dmp

      Filesize

      5.6MB

    • memory/4664-6-0x0000000000A30000-0x0000000000A32000-memory.dmp

      Filesize

      8KB

    • memory/4664-2-0x0000000000401000-0x000000000094C000-memory.dmp

      Filesize

      5.3MB

    • memory/4664-11-0x00000000026D0000-0x0000000002799000-memory.dmp

      Filesize

      804KB

    • memory/4664-10-0x0000000000400000-0x0000000000992000-memory.dmp

      Filesize

      5.6MB

    • memory/4664-9-0x0000000000401000-0x000000000094C000-memory.dmp

      Filesize

      5.3MB

    • memory/4664-8-0x0000000000400000-0x0000000000992000-memory.dmp

      Filesize

      5.6MB