f255227fd45316c4681085f39e6da2f509af851f8cc2d2a84ea99c06b935ffe6

Resubmissions

30-06-2024 00:59

20-06-2024 02:02

20-06-2024 01:44

19-06-2024 01:10

18-06-2024 20:40

18-06-2024 13:45

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20-06-2024 01:44

Target

Documents/Ransomware.TeslaCrypt/Ransomware.TeslaCrypt/51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe
Size

257KB
MD5

6e080aa085293bb9fbdcc9015337d309
SHA1

51b4ef5dc9d26b7a26e214cee90598631e2eaa67
SHA256

9b462800f1bef019d7ec00098682d3ea7fc60e6721555f616399228e4e3ad122
SHA512

4e173fb5287c7ea8ff116099ec1a0599b37f743f8b798368319b5960af38e742124223dfd209457665b701e9efc6e76071fa2513322b232ac50ddad21fcebe77
SSDEEP

6144:xy+als+0nIycigV5cbEo6dZbBODPIsjQ/UFsYW:xy+aCFnIycigVSbObBODTMUd

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe

description	pid	process	target process
PID 5092 wrote to memory of 2420	5092	51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe	51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe
PID 5092 wrote to memory of 2420	5092	51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe	51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe
PID 5092 wrote to memory of 2420	5092	51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe	51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe

C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.TeslaCrypt\Ransomware.TeslaCrypt\51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe
"C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.TeslaCrypt\Ransomware.TeslaCrypt\51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5092

C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.TeslaCrypt\Ransomware.TeslaCrypt\51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe
C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.TeslaCrypt\Ransomware.TeslaCrypt\51B4EF5DC9D26B7A26E214CEE90598631E2EAA67.exe
2⤵
PID:2420

memory/5092-0-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download