Overview

overview

10

Static

static

fdd5325bd1...9d.exe

windows7_x64

10

fdd5325bd1...9d.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdd5325bd1371068d7948d57e640cd01869e5281e1e15eeddafa20448618a89d

  • Size

    268KB

  • Sample

    220628-vvc7wsbbak

  • MD5

    63fb4f33561739b31aa174428905bd27

  • SHA1

    2340adeb468267329279c42bb16c3182bd463967

  • SHA256

    fdd5325bd1371068d7948d57e640cd01869e5281e1e15eeddafa20448618a89d

  • SHA512

    d95b827a6f8bcef238b56a218c29587518b45a7177c5aa2e002f80e3e1f945343d1b5090ddb5b75746066ec5e44b7f0aa59117c497bf116a2cd5dbc7cd9b4198

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      fdd5325bd1371068d7948d57e640cd01869e5281e1e15eeddafa20448618a89d

    • Size

      268KB

    • MD5

      63fb4f33561739b31aa174428905bd27

    • SHA1

      2340adeb468267329279c42bb16c3182bd463967

    • SHA256

      fdd5325bd1371068d7948d57e640cd01869e5281e1e15eeddafa20448618a89d

    • SHA512

      d95b827a6f8bcef238b56a218c29587518b45a7177c5aa2e002f80e3e1f945343d1b5090ddb5b75746066ec5e44b7f0aa59117c497bf116a2cd5dbc7cd9b4198

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Deletes itself

    • Sets desktop wallpaper using registry

      ransomware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks