Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31-05-2024 06:29

General

  • Target

    77e787e8390f6664ebb868ce06cd006dd3a9ef4ccfc57074560d7acd71e053ed.exe

  • Size

    375KB

  • MD5

    030d7645beb4b7e2b35995b68b1d4f30

  • SHA1

    c815a805d6568d3dc267f8f5f8ce881086097a95

  • SHA256

    77e787e8390f6664ebb868ce06cd006dd3a9ef4ccfc57074560d7acd71e053ed

  • SHA512

    97291fb2e0cf8404fdb1ea1d08a8350a8a3972902640384fd96438f909ec0850702dac6f5feed9d5e5fd092581b9f6eca0206569f73199e790073528db9ad027

  • SSDEEP

    6144:jhLF6EWz6r1SGHDWAbrQa51RyK0G0/0X43O7NSfmxaSqvnlXYiauOk/wg/yjOsD:jWEoAHHDhbkaRyKT0/TecuxUvnlXYbuU

Score
10/10

Malware Config

Signatures

  • clop

    Ransomware discovered in early 2019 which has been actively developed since release.

Processes

  • C:\Users\Admin\AppData\Local\Temp\77e787e8390f6664ebb868ce06cd006dd3a9ef4ccfc57074560d7acd71e053ed.exe
    "C:\Users\Admin\AppData\Local\Temp\77e787e8390f6664ebb868ce06cd006dd3a9ef4ccfc57074560d7acd71e053ed.exe"
    1⤵
      PID:1968

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1968-0-0x0000000000400000-0x000000000044D000-memory.dmp

      Filesize

      308KB

    • memory/1968-2-0x0000000000400000-0x000000000044D000-memory.dmp

      Filesize

      308KB

    • memory/1968-3-0x0000000000400000-0x000000000044D000-memory.dmp

      Filesize

      308KB

    • memory/1968-1-0x0000000000400000-0x000000000044D000-memory.dmp

      Filesize

      308KB

    • memory/1968-6-0x0000000000400000-0x000000000044D000-memory.dmp

      Filesize

      308KB

    • memory/1968-5-0x0000000000401000-0x000000000041C000-memory.dmp

      Filesize

      108KB

    • memory/1968-4-0x0000000000270000-0x00000000002AF000-memory.dmp

      Filesize

      252KB

    • memory/1968-7-0x0000000000330000-0x0000000000332000-memory.dmp

      Filesize

      8KB

    • memory/1968-9-0x0000000000400000-0x000000000044D000-memory.dmp

      Filesize

      308KB

    • memory/1968-11-0x0000000000401000-0x000000000041C000-memory.dmp

      Filesize

      108KB

    • memory/1968-10-0x0000000000270000-0x00000000002AF000-memory.dmp

      Filesize

      252KB