Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
15/06/2024, 14:28
General
-
Target
2024-06-15_400132f8ccef304b6407fa14fa965f8d_cryptolocker.exe
-
Size
45KB
-
MD5
400132f8ccef304b6407fa14fa965f8d
-
SHA1
ab97294a985d66b159671dfc94fc95f75f9204fe
-
SHA256
62345061d194d3388837fd559a06d93bbe6e3c4097b2d615c8980869d4c3b583
-
SHA512
faf6d80c268491b04825bcf68b109232d108d5dcfe88796e10e8459d289db97d0b0e0aaf1802cd84166e6944c66aef3c6b7d2a193feb535852e29b5f8bb6f078
-
SSDEEP
768:P6LsoVEeegiZPvEhHSP+gp/QtOOtEvwDpjBBMLZdzuqpXsiE8Wq/DpkHl:P6Q0ElP6G+gJQMOtEvwDpjB8WMlsl
Malware Config
Signatures
-
Detection of CryptoLocker Variants 5 IoCs
-
Detection of Cryptolocker Samples 5 IoCs
-
Executes dropped EXE 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-15_400132f8ccef304b6407fa14fa965f8d_cryptolocker.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-15_400132f8ccef304b6407fa14fa965f8d_cryptolocker.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\asih.exe"C:\Users\Admin\AppData\Local\Temp\asih.exe"2⤵
- Executes dropped EXE
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46KB
MD50259379f3e77d00c4baaca05a27cc885
SHA12b073456797ff4543426764cc656f0afa405b796
SHA256102e75477069526fb356c6ea4421ec9957c912e3811fc4978467e7bd3550385d
SHA51291c7e36820ee12061c4e7241d75da681b1b620ef8f38b5db8849a8f3ab5b64926ad259353ee3e44354d9882ec01263721350f10dbd1a72acd72e6679d9a9d302
-
Filesize
24KB
-
Filesize
44KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
44KB
-
Filesize
44KB
-
Filesize
24KB
-
Filesize
24KB
-
Filesize
44KB