General
-
Target
c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.sample
-
Size
1.2MB
-
Sample
210726-yfnhsjwkvj
-
MD5
e11502659f6b5c5bd9f78f534bc38fea
-
SHA1
b5fd5c913de8cbb8565d3c7c67c0fbaa4090122b
-
SHA256
c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15
-
SHA512
86c8d4556c9e0b7d60ccbfee430eb322388449506ab515549cb8d2785582671f2dc2d2a3bd9daded9853caa8bf94d9f92603a3bc527172a85dc7a83d701f7fd0
Static task
static1
Behavioral task
behavioral1
Sample
c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.sample.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.sample.exe
Resource
win10v20210408
Malware Config
Extracted
C:\Users\Public\Desktop\README_LOCKED.txt
DharmaParrack@protonmail.com
wyattpettigrew8922555@mail.com
Extracted
C:\Users\Public\Desktop\README_LOCKED.txt
Targets
-
-
Target
c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15.sample
-
Size
1.2MB
-
MD5
e11502659f6b5c5bd9f78f534bc38fea
-
SHA1
b5fd5c913de8cbb8565d3c7c67c0fbaa4090122b
-
SHA256
c97d9bbc80b573bdeeda3812f4d00e5183493dd0d5805e2508728f65977dda15
-
SHA512
86c8d4556c9e0b7d60ccbfee430eb322388449506ab515549cb8d2785582671f2dc2d2a3bd9daded9853caa8bf94d9f92603a3bc527172a85dc7a83d701f7fd0
Score10/10-
LockerGoga
LockerGoga is a ransomware that is primarily used in targeted, disruptive attacks.
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Drops desktop.ini file(s)
-