Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 00:20
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_55dd72e153fbd0cf4cb86dc9a742ce74.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
VirusShare_55dd72e153fbd0cf4cb86dc9a742ce74.exe
Resource
win10v2004-20240226-en
General
-
Target
VirusShare_55dd72e153fbd0cf4cb86dc9a742ce74.exe
-
Size
208KB
-
MD5
55dd72e153fbd0cf4cb86dc9a742ce74
-
SHA1
de5db46f65e92331c287fbddc00b48af8e230b5b
-
SHA256
799925ac2fd7020f2fde87ee9c43d3c18e33ebe8ff0ebdaeb03bc71f96a6264b
-
SHA512
a620ce2eacf6a2dda27326242650cd339ddded974b5f50d50a4b8d5d16c0b95b2db452c864a583fbd31feb34c11007473dc9745eee7b3e0969d43e2d22153d0c
-
SSDEEP
3072:gvQZiYQMqhfgWhIEDYo80lmhsuM9KCTFYhh2MsK4cuLAGq7/H/Smuj9HNW+lEFDG:Jyhfphz180lK29KGFYhhJ4KYJtW+l
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
VirusShare_55dd72e153fbd0cf4cb86dc9a742ce74.exepid process 1644 VirusShare_55dd72e153fbd0cf4cb86dc9a742ce74.exe