General
-
Target
wyvernlocker.zip
-
Size
7KB
-
Sample
200725-9f9zmrym5x
-
MD5
c498a0da4a01e015cc4a52755d2c30c9
-
SHA1
410d43a98c933099a4606641ffb4fc1d8ad63ca7
-
SHA256
3f3e5b52c2fa33332d365caf38eb4c099257d4ad12a592dafc9d974062fbc236
-
SHA512
6ef3243a636a93f0114d4e64fe0b67511312152555973ca8e84d4fe452f43387c9414b9bf85ba6d3ab5ac351249a162b7bf3c98c8206e0046b8119c0d3423d62
Static task
static1
Behavioral task
behavioral1
Sample
wyvernlocker.bin.exe
Resource
win7
Behavioral task
behavioral2
Sample
wyvernlocker.bin.exe
Resource
win10v200722
Malware Config
Targets
-
-
Target
wyvernlocker.bin
-
Size
15KB
-
MD5
1a9757fcdf21843b5029db6c5b83a83a
-
SHA1
177897a6a38ec00a6dbf1004342f6111962053b5
-
SHA256
c806bc2e5eabdaf5e0e34cf142a00e4b1caaf643340528f98311745347e61c1d
-
SHA512
9cde834f5349c1bd443da006510260f0fb9870c6781ed2ed4caa61e36a177b5436eba3af673cea09154bca3db82888a9efc62622185a364572f080d1a219a2da
Score8/10-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-