Analysis

  • max time kernel
    147s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-06-2024 21:19

General

  • Target

    2024-06-17_e3488ed0e3e8172973150c069dd291c7_cryptolocker.exe

  • Size

    391KB

  • MD5

    ed927e2378f60d90a8f039fbdbd15e69

  • SHA1

    2a5298c4706346dc2d607126ef8f891a2cc588e5

  • SHA256

    bd375de04d5c448c650d47f03f123f1b307cca3b1a4c7986649049ac9a1f91ff

  • SHA512

    426d560aa0330e5a09b525ab8f7b40c47e3d1e94d3212a7e3155950e4c115591b3dd1b8b4d3c91c78b898f5bbfe8b2c23690410a4ccb5095b7523fe7ea1b361b

  • SSDEEP

    6144:eiLAQrKanaU5AsSXYCQ6Kj28ov71tl9KXDQrOkcYB1Q:eiLZV15AszCQ6KC8oz1RKQOhe1Q

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-17_e3488ed0e3e8172973150c069dd291c7_cryptolocker.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-17_e3488ed0e3e8172973150c069dd291c7_cryptolocker.exe"
    1⤵
      PID:2188
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2188 -s 224
        2⤵
        • Program crash
        PID:3200
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2188 -ip 2188
      1⤵
        PID:3048

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads