Overview

overview

10

Static

static

5c91d98b73...9c.exe

windows7_x64

10

5c91d98b73...9c.exe

windows10-2004_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c91d98b73496259cc907a4fb562272b1bbaa91e0b1d02a8aa54fbee49e4749c

  • Size

    211KB

  • Sample

    220628-v8tf2achh6

  • MD5

    a36ce179802137661d4429992fde242b

  • SHA1

    ef461c73b2d0e0eae486c6615750e47f2a496a4a

  • SHA256

    5c91d98b73496259cc907a4fb562272b1bbaa91e0b1d02a8aa54fbee49e4749c

  • SHA512

    3fb6ff43c0dcbdae418d91db7e5d4560c4a39fecf0f62c99e6efa8a37816c3f2da705739104c918bd94c90e7154e54b700f822ffa16fa456f13f7c8e40fe9f78

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      5c91d98b73496259cc907a4fb562272b1bbaa91e0b1d02a8aa54fbee49e4749c

    • Size

      211KB

    • MD5

      a36ce179802137661d4429992fde242b

    • SHA1

      ef461c73b2d0e0eae486c6615750e47f2a496a4a

    • SHA256

      5c91d98b73496259cc907a4fb562272b1bbaa91e0b1d02a8aa54fbee49e4749c

    • SHA512

      3fb6ff43c0dcbdae418d91db7e5d4560c4a39fecf0f62c99e6efa8a37816c3f2da705739104c918bd94c90e7154e54b700f822ffa16fa456f13f7c8e40fe9f78

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Deletes itself

    • Loads dropped DLL

    • Sets desktop wallpaper using registry

      ransomware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks