Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
06-06-2024 00:27
General
-
Target
2024-06-05_b1b41e7f96c1251df4f72f25b08de746_cryptolocker.exe
-
Size
42KB
-
MD5
b1b41e7f96c1251df4f72f25b08de746
-
SHA1
2e95190a3f0793c18266c934fcadd4235416445d
-
SHA256
28e09d837b577c3832dea83a3cd53f0effdfc0698f5abae347479998ab8f851d
-
SHA512
05b39f059c4aa09143d2732e95256345263988ca7538b5c00fed6f8d2d38f12dc0f4dbd7da39c029e972899cffb38bfc57244f232125b7a6ce551f4d96671d8d
-
SSDEEP
768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAqAA:bCDOw9aMDooc+vAqAA
Score
9/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 4 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-05_b1b41e7f96c1251df4f72f25b08de746_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-05_b1b41e7f96c1251df4f72f25b08de746_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\lossy.exe"C:\Users\Admin\AppData\Local\Temp\lossy.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
42KB
MD5773cccf7ad03e95f9042c757cbc70e93
SHA105b48aaaf82affde1855a8257b48dadef415e30d
SHA256512aea1948ccff82f60346428fdc4e98869f60d377263bcac0785d53ba72a3e7
SHA512fc56d1c90724ca3b2d2f6e36d769a194a16ae323ec73cc1efba40fe7650defd1e220bb66e40dfc8408eb41a2df971325963004afb8652d7a0942c258a217a36d
-
Filesize
40KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
40KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
40KB