Analysis

  • max time kernel
    146s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09-06-2024 23:51

General

  • Target

    VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe

  • Size

    244KB

  • MD5

    0d2bcf8a2d4c4ced43d5b6efe39aa712

  • SHA1

    9718396a27ec090f5392e8e91a8c71f05623b74a

  • SHA256

    34788994f4d7dd30f644796a869f0db7e3779999d25395b836153d108dc8a47d

  • SHA512

    80441936f51f48c9e3784d7359ede589ee9b50dca4df2d31a0606c7b455adfa4d9a2d711e836eb1895ecbe16bfd3c99f5cf3f63501a6133fb5fa792a5985af57

  • SSDEEP

    3072:wOSOrEj8LBctSm0mQec772UgH4juLAGg7oH/1XGQLChHVX0kUa:zSQEjoBTtecn4H4AE4s

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_0d2bcf8a2d4c4ced43d5b6efe39aa712.exe"
    1⤵
      PID:2984

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2984-0-0x0000000001091000-0x0000000001093000-memory.dmp

      Filesize

      8KB

    • memory/2984-1-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-2-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-4-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-6-0x0000000001091000-0x0000000001093000-memory.dmp

      Filesize

      8KB

    • memory/2984-7-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-8-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-11-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-13-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-14-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-15-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-16-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB

    • memory/2984-18-0x0000000001080000-0x00000000010C1000-memory.dmp

      Filesize

      260KB