Analysis
- max time kernel
1784s - max time network
1793s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
28/06/2022, 17:23
General
- Target 5434b9ecdb4aba3f8e89ea41917a25bda462e0a2d3958460fd92b8418717ad32.exe
- Size 162KB
- Sample220628-vygpgsbbbr
- SHA256 5434b9ecdb4aba3f8e89ea41917a25bda462e0a2d3958460fd92b8418717ad32
Score
10/10
Malware Config
Signatures
- Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
- suricata: ET MALWARE Ransomware Locky CnC Beacon
suricata: ET MALWARE Ransomware Locky CnC Beacon
Processes
-
C:\Users\Admin\AppData\Local\Temp\5434b9ecdb4aba3f8e89ea41917a25bda462e0a2d3958460fd92b8418717ad32.exe"C:\Users\Admin\AppData\Local\Temp\5434b9ecdb4aba3f8e89ea41917a25bda462e0a2d3958460fd92b8418717ad32.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4156-130-0x0000000000400000-0x000000000042D000-memory.dmp
memory/4156-132-0x0000000000400000-0x000000000042D000-memory.dmp
memory/4156-133-0x0000000000400000-0x000000000042D000-memory.dmp