Analysis Overview
SHA256
ea0051264abbe75be3b04428243da23ae5c537c63b55913ddbe00e92511d774b
Threat Level: Known bad
The file 2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker was found to be: Known bad.
Malicious Activity Summary
Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Checks computer location settings
Executes dropped EXE
Loads dropped DLL
Unsigned PE
Enumerates physical storage devices
Suspicious use of WriteProcessMemory
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-06-13 03:36
Signatures
Detection of CryptoLocker Variants
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Detection of Cryptolocker Samples
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2024-06-13 03:36
Reported
2024-06-13 03:39
Platform
win7-20231129-en
Max time kernel
150s
Max time network
150s
Command Line
Signatures
Detection of CryptoLocker Variants
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Detection of Cryptolocker Samples
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\misid.exe | N/A |
Loads dropped DLL
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | N/A |
Enumerates physical storage devices
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 2140 wrote to memory of 2704 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
| PID 2140 wrote to memory of 2704 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
| PID 2140 wrote to memory of 2704 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
| PID 2140 wrote to memory of 2704 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe"
C:\Users\Admin\AppData\Local\Temp\misid.exe
"C:\Users\Admin\AppData\Local\Temp\misid.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | bestccc.com | udp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | bestccc.com | tcp |
| IN | 103.91.187.97:443 | tcp |
Files
memory/2140-0-0x00000000002C0000-0x00000000002C6000-memory.dmp
memory/2140-8-0x00000000002C0000-0x00000000002C6000-memory.dmp
memory/2140-1-0x0000000000310000-0x0000000000316000-memory.dmp
\Users\Admin\AppData\Local\Temp\misid.exe
| MD5 | dda6eb3193290459204c4be905590d9f |
| SHA1 | ffdcc7a34529426cb0be4b88ef44b64972f95d66 |
| SHA256 | 2c59fb3ad8b18c61c0b6a7d66bbb72bf40a370864085509acb110186659204a8 |
| SHA512 | 5209717b42f672a9161a1522cf58d80ce388746303688b3bf4a0bfb65c914d4e451591732d1bc64ce68f7fb4304a1c48070ce6ff6e369221b4f72fba11274815 |
memory/2704-15-0x0000000000370000-0x0000000000376000-memory.dmp
memory/2704-22-0x0000000000240000-0x0000000000246000-memory.dmp
Analysis: behavioral2
Detonation Overview
Submitted
2024-06-13 03:36
Reported
2024-06-13 03:39
Platform
win10v2004-20240508-en
Max time kernel
150s
Max time network
150s
Command Line
Signatures
Detection of CryptoLocker Variants
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Detection of Cryptolocker Samples
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000\Control Panel\International\Geo\Nation | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | N/A |
Executes dropped EXE
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\misid.exe | N/A |
Enumerates physical storage devices
Suspicious use of WriteProcessMemory
| Description | Indicator | Process | Target |
| PID 372 wrote to memory of 1008 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
| PID 372 wrote to memory of 1008 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
| PID 372 wrote to memory of 1008 | N/A | C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe | C:\Users\Admin\AppData\Local\Temp\misid.exe |
Processes
C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-13_702c1f8048c3e11b74557b115d715f2f_cryptolocker.exe"
C:\Users\Admin\AppData\Local\Temp\misid.exe
"C:\Users\Admin\AppData\Local\Temp\misid.exe"
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
| US | 8.8.8.8:53 | bestccc.com | udp |
Files
memory/372-0-0x00000000006A0000-0x00000000006A6000-memory.dmp
memory/372-1-0x00000000006C0000-0x00000000006C6000-memory.dmp
memory/372-8-0x00000000006A0000-0x00000000006A6000-memory.dmp
C:\Users\Admin\AppData\Local\Temp\misid.exe
| MD5 | dda6eb3193290459204c4be905590d9f |
| SHA1 | ffdcc7a34529426cb0be4b88ef44b64972f95d66 |
| SHA256 | 2c59fb3ad8b18c61c0b6a7d66bbb72bf40a370864085509acb110186659204a8 |
| SHA512 | 5209717b42f672a9161a1522cf58d80ce388746303688b3bf4a0bfb65c914d4e451591732d1bc64ce68f7fb4304a1c48070ce6ff6e369221b4f72fba11274815 |
memory/1008-17-0x00000000004F0000-0x00000000004F6000-memory.dmp
memory/1008-23-0x00000000004D0000-0x00000000004D6000-memory.dmp