Analysis
- max time kernel
1798s - max time network
1801s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
28/06/2022, 17:23
General
- Target 541f2fcc8b14053a442d2f37c71507373d4ccba5957530015940d05834feb2bf.exe
- Size 188KB
- Sample220628-vx364abbbq
- SHA256 541f2fcc8b14053a442d2f37c71507373d4ccba5957530015940d05834feb2bf
Score
10/10
Malware Config
Signatures
- Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
- suricata: ET MALWARE Ransomware Locky CnC Beacon
suricata: ET MALWARE Ransomware Locky CnC Beacon
Processes
-
C:\Users\Admin\AppData\Local\Temp\541f2fcc8b14053a442d2f37c71507373d4ccba5957530015940d05834feb2bf.exe"C:\Users\Admin\AppData\Local\Temp\541f2fcc8b14053a442d2f37c71507373d4ccba5957530015940d05834feb2bf.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2700-130-0x0000000000590000-0x0000000000596000-memory.dmp
memory/2700-131-0x0000000000400000-0x000000000044C000-memory.dmp
memory/2700-134-0x0000000000590000-0x0000000000596000-memory.dmp