Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09-06-2024 23:53

General

  • Target

    VirusShare_1a25e8d2191d73256fa06b48f4c80d8d.exe

  • Size

    340KB

  • MD5

    1a25e8d2191d73256fa06b48f4c80d8d

  • SHA1

    0f67846414a0c472a14197d40d3e34015a7c2c27

  • SHA256

    d754f6f60581154962c6a8ed5c105fd690852daa25758affaa0f9f74728ce6aa

  • SHA512

    8f6124bf0f5448aa9ac542982766699e4606bd8192d77e23a7b7a6ab3f3c3fe092b6f6d4ccf07254d3c13de3c5bef444843d227a6a741560534c68e3b1709f33

  • SSDEEP

    3072:DZ8x0/lk/TCpXj1H+am0SeAePqeYm88J5ZOiXKdsqYa/Qm7/f9pO8LJvs7qYyuJ:N8xZ/mpTR+aFvP9xuiaka/QIoA

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_1a25e8d2191d73256fa06b48f4c80d8d.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_1a25e8d2191d73256fa06b48f4c80d8d.exe"
    1⤵
      PID:2400

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2400-0-0x00000000003B0000-0x00000000003CC000-memory.dmp

      Filesize

      112KB

    • memory/2400-1-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-3-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-5-0x00000000003B0000-0x00000000003CC000-memory.dmp

      Filesize

      112KB

    • memory/2400-6-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-8-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-12-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-14-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-16-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB

    • memory/2400-18-0x0000000000400000-0x0000000000459000-memory.dmp

      Filesize

      356KB