Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
10/06/2024, 00:07
General
- Target VirusShare_38c90f2133ea2aa965878317033f4fe8.exe
- Size 186KB
- Sample240610-aerecshf55
- SHA256 d1f01633169906cae748e3fbbdbeda77c3dadb9996202ad9b1fb1209f174eaf7
Malware Config
Signatures
- Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\VirusShare_38c90f2133ea2aa965878317033f4fe8.exe"C:\Users\Admin\AppData\Local\Temp\VirusShare_38c90f2133ea2aa965878317033f4fe8.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/548-1-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-0-0x0000000000418000-0x000000000041A000-memory.dmp
memory/548-2-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-4-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-6-0x0000000000418000-0x000000000041A000-memory.dmp
memory/548-7-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-11-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-14-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-16-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-18-0x0000000000400000-0x0000000000434000-memory.dmp
memory/548-19-0x0000000000400000-0x0000000000434000-memory.dmp