Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2024 00:21

General

  • Target

    VirusShare_5ef9cff61795536ff04b122aa758d233.exe

  • Size

    186KB

  • MD5

    5ef9cff61795536ff04b122aa758d233

  • SHA1

    e2a611cabfc2cdd238ffcdee35bf7864a1994bde

  • SHA256

    bba3e98354d122c35d42f5679038f149cd191ba90172cf0fe4313b5cdeec12a4

  • SHA512

    253dfbd7adc830e32a23b63019ce43e03b5dc913d8c09b29d6f623fdedf7e6ae65e1439bd86c96de86894c394c6c742e57930d81b3612ad81b4ba780e5124371

  • SSDEEP

    3072:BYf1WPFwUh0Rg3AGMGtXdrNa39LCEVhNbHwwHJV81vCFzopx6:BY9m7h0R1GtBwvRLwwj81vCCp

Score
10/10

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_5ef9cff61795536ff04b122aa758d233.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_5ef9cff61795536ff04b122aa758d233.exe"
    1⤵
      PID:2756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2756-0-0x0000000000418000-0x000000000041A000-memory.dmp
      Filesize

      8KB

    • memory/2756-1-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-3-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-4-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-6-0x0000000000418000-0x000000000041A000-memory.dmp
      Filesize

      8KB

    • memory/2756-7-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-11-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-13-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-16-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB

    • memory/2756-18-0x0000000000400000-0x0000000000434000-memory.dmp
      Filesize

      208KB