Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-06-2024 04:31

General

  • Target

    VirusShare_5ef9cff61795536ff04b122aa758d233.exe

  • Size

    186KB

  • MD5

    5ef9cff61795536ff04b122aa758d233

  • SHA1

    e2a611cabfc2cdd238ffcdee35bf7864a1994bde

  • SHA256

    bba3e98354d122c35d42f5679038f149cd191ba90172cf0fe4313b5cdeec12a4

  • SHA512

    253dfbd7adc830e32a23b63019ce43e03b5dc913d8c09b29d6f623fdedf7e6ae65e1439bd86c96de86894c394c6c742e57930d81b3612ad81b4ba780e5124371

  • SSDEEP

    3072:BYf1WPFwUh0Rg3AGMGtXdrNa39LCEVhNbHwwHJV81vCFzopx6:BY9m7h0R1GtBwvRLwwj81vCCp

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_5ef9cff61795536ff04b122aa758d233.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_5ef9cff61795536ff04b122aa758d233.exe"
    1⤵
      PID:424

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/424-3-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-2-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-0-0x0000000000418000-0x000000000041A000-memory.dmp

      Filesize

      8KB

    • memory/424-4-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-6-0x0000000000418000-0x000000000041A000-memory.dmp

      Filesize

      8KB

    • memory/424-7-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-9-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-13-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-15-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB

    • memory/424-18-0x0000000000400000-0x0000000000434000-memory.dmp

      Filesize

      208KB