Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-06-2024 22:31

General

  • Target

    VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe

  • Size

    244KB

  • MD5

    0d2bcf8a2d4c4ced43d5b6efe39aa712

  • SHA1

    9718396a27ec090f5392e8e91a8c71f05623b74a

  • SHA256

    34788994f4d7dd30f644796a869f0db7e3779999d25395b836153d108dc8a47d

  • SHA512

    80441936f51f48c9e3784d7359ede589ee9b50dca4df2d31a0606c7b455adfa4d9a2d711e836eb1895ecbe16bfd3c99f5cf3f63501a6133fb5fa792a5985af57

  • SSDEEP

    3072:wOSOrEj8LBctSm0mQec772UgH4juLAGg7oH/1XGQLChHVX0kUa:zSQEjoBTtecn4H4AE4s

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe"
    1⤵
      PID:1924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1924-0-0x0000000000CA1000-0x0000000000CA3000-memory.dmp

      Filesize

      8KB

    • memory/1924-1-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-2-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-4-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-6-0x0000000000CA1000-0x0000000000CA3000-memory.dmp

      Filesize

      8KB

    • memory/1924-7-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-8-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-11-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-13-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-14-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-15-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-16-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB

    • memory/1924-18-0x0000000000C90000-0x0000000000CD1000-memory.dmp

      Filesize

      260KB