Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-06-2024 23:44

General

  • Target

    VirusShare_20e927a1b4eedb39b1a23b3386d7ff19.exe

  • Size

    245KB

  • MD5

    20e927a1b4eedb39b1a23b3386d7ff19

  • SHA1

    fced2494eb4038bbc06c6925033d99f557167b45

  • SHA256

    f1e94b8782af95af7c24e494f1a75da1b6df1f8df946f03b874acc6f12101c09

  • SHA512

    704819229a2f4b88266d8381debf48545077de2c643f28fa30a605a4b00dcec87c1075cb25cfa5ab048657d20d02a6fdfad462105fee458a7756c6bea44ef455

  • SSDEEP

    3072:zYdUY+Bzjvs8tPjjS4g4E1uLAGg7oH/P0csHXLpFZ2wArewgkUEj:cdULzACnng4TvEL+Sw

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_20e927a1b4eedb39b1a23b3386d7ff19.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_20e927a1b4eedb39b1a23b3386d7ff19.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:4528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4528-1-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-3-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-2-0x00000000002D2000-0x00000000002D4000-memory.dmp

    Filesize

    8KB

  • memory/4528-6-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-7-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-10-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-12-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-14-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-15-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB

  • memory/4528-17-0x00000000002C0000-0x0000000000302000-memory.dmp

    Filesize

    264KB