Overview

overview

10

Static

static

3

VirusShare...b1.exe

windows7-x64

10

VirusShare...b1.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-06-2024 00:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    VirusShare_8c8029ce098e206eb99fbdd4f1ebe3b1.exe

  • Size

    162KB

  • MD5

    8c8029ce098e206eb99fbdd4f1ebe3b1

  • SHA1

    48cffe0fba17b6ac8c7b4a1199de151f9e97d846

  • SHA256

    59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef

  • SHA512

    d4e0f13be2c348943d2e1f8a9cfb27216768a2048af3d610b56e8bfd32923a13cf635e7b6395f77e1bdc9ab1ee82ea28e6b6672d5c2092895a0e3b2baee059cb

  • SSDEEP

    3072:3S4Dst7k1hdUq6UtBlH74+F4Y0Yti3zeBzd3An1YgCQSPH96PHNrD5o85PPi+/23:bDcUUqrB17l9A3zeBzJAn3ClH96PHNr9

Score
10/10
lockyransomware

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

    ransomwarelocky

Processes

  • C:\Users\Admin\AppData\Local\Temp\VirusShare_8c8029ce098e206eb99fbdd4f1ebe3b1.exe
    "C:\Users\Admin\AppData\Local\Temp\VirusShare_8c8029ce098e206eb99fbdd4f1ebe3b1.exe"
    1⤵
      PID:1296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1296-0-0x0000000000412000-0x0000000000414000-memory.dmp
      Filesize

      8KB

      Download
    • memory/1296-1-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-2-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-4-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-7-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-8-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-11-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-12-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-14-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-16-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1296-17-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download