General

  • Target
    20161205_2e6c571558fdba57b85cb4db3b98a3c3.js
  • Size 13KB
  • Sample211117-nyj2aacdf5
  • SHA256 b8494b88e63351904e2e8cfb7f9f25ed4bd01a8e1b35cca65dff546dc5c01ccf
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      20161205_2e6c571558fdba57b85cb4db3b98a3c3.js
    • Size 13KB
    • SHA256 b8494b88e63351904e2e8cfb7f9f25ed4bd01a8e1b35cca65dff546dc5c01ccf
    • MD5 SHA1 SHA512
    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

    • Locky (Osiris variant)

      Variant of the Locky ransomware seen in the wild since early 2017.

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks