Overview

overview

10

Static

static

3ae1719fce...6e.exe

windows7_x64

10

3ae1719fce...6e.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    03-07-2022 18:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e.exe

  • Size

    359KB

  • MD5

    258902877202d382f93e883a2f13109e

  • SHA1

    f644dce27b8f0833bb8f97529a89aca6516bcf2d

  • SHA256

    3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e

  • SHA512

    9ba322e1b8e66982016dfb3b4f0675f315edf9e1ce0bad9607fa2ae94f8e143d46b193b191017674048e46a98772b92fd2678258806f1713fe0aed5111ca9de4

Score
10/10
lockylocky_osirisransomware

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

    ransomwarelocky
  • Locky (Osiris variant)

    Variant of the Locky ransomware seen in the wild since early 2017.

    ransomwarelocky_osiris

Processes

  • C:\Users\Admin\AppData\Local\Temp\3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e.exe
    "C:\Users\Admin\AppData\Local\Temp\3ae1719fce6e7807d26c7df9195ec7d8518c2c551744770be5a951efc800416e.exe"
    1⤵
      PID:2696

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2696-130-0x0000000002B80000-0x0000000002BA8000-memory.dmp
      Filesize

      160KB

      Download
    • memory/2696-131-0x0000000000400000-0x000000000045E000-memory.dmp
      Filesize

      376KB

      Download
    • memory/2696-133-0x0000000002880000-0x00000000028A7000-memory.dmp
      Filesize

      156KB

      Download
    • memory/2696-134-0x0000000002B80000-0x0000000002BA8000-memory.dmp
      Filesize

      160KB

      Download