Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-06-2024 00:21
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_5ef9cff61795536ff04b122aa758d233.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VirusShare_5ef9cff61795536ff04b122aa758d233.exe
Resource
win10v2004-20240508-en
General
-
Target
VirusShare_5ef9cff61795536ff04b122aa758d233.exe
-
Size
186KB
-
MD5
5ef9cff61795536ff04b122aa758d233
-
SHA1
e2a611cabfc2cdd238ffcdee35bf7864a1994bde
-
SHA256
bba3e98354d122c35d42f5679038f149cd191ba90172cf0fe4313b5cdeec12a4
-
SHA512
253dfbd7adc830e32a23b63019ce43e03b5dc913d8c09b29d6f623fdedf7e6ae65e1439bd86c96de86894c394c6c742e57930d81b3612ad81b4ba780e5124371
-
SSDEEP
3072:BYf1WPFwUh0Rg3AGMGtXdrNa39LCEVhNbHwwHJV81vCFzopx6:BY9m7h0R1GtBwvRLwwj81vCCp
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2756-0-0x0000000000418000-0x000000000041A000-memory.dmpFilesize
8KB
-
memory/2756-1-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-3-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-4-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-6-0x0000000000418000-0x000000000041A000-memory.dmpFilesize
8KB
-
memory/2756-7-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-11-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-13-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-16-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB
-
memory/2756-18-0x0000000000400000-0x0000000000434000-memory.dmpFilesize
208KB