Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-06-2024 22:31

General

  • Target

    VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe

  • Size

    244KB

  • MD5

    0d2bcf8a2d4c4ced43d5b6efe39aa712

  • SHA1

    9718396a27ec090f5392e8e91a8c71f05623b74a

  • SHA256

    34788994f4d7dd30f644796a869f0db7e3779999d25395b836153d108dc8a47d

  • SHA512

    80441936f51f48c9e3784d7359ede589ee9b50dca4df2d31a0606c7b455adfa4d9a2d711e836eb1895ecbe16bfd3c99f5cf3f63501a6133fb5fa792a5985af57

  • SSDEEP

    3072:wOSOrEj8LBctSm0mQec772UgH4juLAGg7oH/1XGQLChHVX0kUa:zSQEjoBTtecn4H4AE4s

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe"
    1⤵
      PID:4888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4888-1-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-2-0x0000000000551000-0x0000000000553000-memory.dmp

      Filesize

      8KB

    • memory/4888-3-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-6-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-9-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-12-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-14-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-16-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB

    • memory/4888-17-0x0000000000540000-0x0000000000581000-memory.dmp

      Filesize

      260KB