80c5e8f13d838fd509ddb0eaa4daf63c8d09b4d34556794cbcaec20875210208

Submit
Reports

Overview

overview

Static

static

Ransom.Win...wn.vbs

windows7-x64

Ransom.Win...wn.vbs

windows10-2004-x64

Ransom.Win...wn.vbs

windows10-ltsc 2021-x64

Ransom.Win...wn.vbs

windows11-21h2-x64

Ransom.Win...rX.vbs

windows7-x64

Ransom.Win...rX.vbs

windows10-2004-x64

Ransom.Win...rX.vbs

windows10-ltsc 2021-x64

Ransom.Win...rX.vbs

windows11-21h2-x64

other malw...0r.exe

windows7-x64

other malw...0r.exe

windows10-2004-x64

other malw...0r.exe

windows10-ltsc 2021-x64

other malw...0r.exe

windows11-21h2-x64

other malw...pe.exe

windows7-x64

other malw...pe.exe

windows10-2004-x64

other malw...pe.exe

windows10-ltsc 2021-x64

other malw...pe.exe

windows11-21h2-x64

other malw...rm.vbs

windows7-x64

other malw...rm.vbs

windows10-2004-x64

other malw...rm.vbs

windows10-ltsc 2021-x64

other malw...rm.vbs

windows11-21h2-x64

Analysis

max time kernel
147s
max time network
153s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
25-10-2024 15:13

Sharing

Copy URL

Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX with shutdown.vbs

Resource

win7-20240903-en

windows7-x64

24 signatures

150 seconds

Behavioral task

behavioral2

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX with shutdown.vbs

Resource

win10v2004-20241007-en

defense_evasion evasion execution impact persistence ransomware trojan

windows10-2004-x64

23 signatures

150 seconds

Behavioral task

behavioral3

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX with shutdown.vbs

Resource

win10ltsc2021-20241023-en

defense_evasion evasion execution impact persistence ransomware trojan

windows10-ltsc 2021-x64

22 signatures

150 seconds

Behavioral task

behavioral4

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX with shutdown.vbs

Resource

win11-20241007-en

defense_evasion evasion execution impact persistence ransomware trojan

windows11-21h2-x64

19 signatures

150 seconds

Behavioral task

behavioral5

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX.vbs

Resource

win7-20241010-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows7-x64

24 signatures

150 seconds

Behavioral task

behavioral6

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX.vbs

Resource

win10v2004-20241007-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows10-2004-x64

28 signatures

150 seconds

Behavioral task

behavioral7

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX.vbs

Resource

win10ltsc2021-20241023-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows10-ltsc 2021-x64

28 signatures

150 seconds

Behavioral task

behavioral8

Sample

Ransom.Win32.LCrypt0rX.A/LCrypt0rX.vbs

Resource

win11-20241007-en

defense_evasion discovery evasion execution impact persistence ransomware trojan

windows11-21h2-x64

20 signatures

150 seconds

Behavioral task

behavioral9

Sample

other malware cuz why not/[email protected]

Resource

win7-20241010-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows7-x64

22 signatures

150 seconds

Behavioral task

behavioral10

Sample

other malware cuz why not/[email protected]

Resource

win10v2004-20241007-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows10-2004-x64

20 signatures

150 seconds

Behavioral task

behavioral11

Sample

other malware cuz why not/[email protected]

Resource

win10ltsc2021-20241023-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows10-ltsc 2021-x64

20 signatures

150 seconds

Behavioral task

behavioral12

Sample

other malware cuz why not/[email protected]

Resource

win11-20241007-en

wannacry defense_evasion discovery execution impact persistence ransomware spyware stealer worm

windows11-21h2-x64

20 signatures

150 seconds

Behavioral task

behavioral13

Sample

other malware cuz why not/NoEscape.exe

Resource

win7-20240903-en

discovery

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral14

Sample

other malware cuz why not/NoEscape.exe

Resource

win10v2004-20241007-en

discovery evasion persistence ransomware trojan

windows10-2004-x64

13 signatures

150 seconds

Behavioral task

behavioral15

Sample

other malware cuz why not/NoEscape.exe

Resource

win10ltsc2021-20241023-en

discovery evasion persistence ransomware trojan

windows10-ltsc 2021-x64

13 signatures

150 seconds

Behavioral task

behavioral16

Sample

other malware cuz why not/NoEscape.exe

Resource

win11-20241023-en

discovery evasion persistence ransomware trojan

windows11-21h2-x64

13 signatures

150 seconds

Behavioral task

behavioral17

Sample

other malware cuz why not/loveletterworm.vbs

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

other malware cuz why not/loveletterworm.vbs

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

other malware cuz why not/loveletterworm.vbs

Resource

win10ltsc2021-20241023-en

windows10-ltsc 2021-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

other malware cuz why not/loveletterworm.vbs

Resource

win11-20241007-en

windows11-21h2-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

other malware cuz why not/loveletterworm.vbs
Size

10KB
MD5

d94e46e40f5663dd698dad3369f1f782
SHA1

9c511b8ddf0c2c9ce9c32d92cdf60c1e3d1c8abf
SHA256

bc39d64a797497d2e0e6cd498f7b84c6fa2464cc7dc29114ef9af438089c5f25
SHA512

07e6f98ba6374f68886f9f642598744b91954a76e1b23fdb9ece89835b596d9bde68c96eedf5f2bbbad3d53b84b7d1dd231ebb9e8d9757996d2779b4c802bd02
SSDEEP

192:brjZcrmlHV31G7sMBMLMLMiMhM5MmMhMrMXM57Mksc/021wqIVCPsz87sGdOVRJS:brjOi1V31GoIGWFqAHqi407/sX/pVCdV

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\other malware cuz why not\loveletterworm.vbs"
1⤵
PID:848

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads