Overview

overview

10

Static

static

41ad23005b...68.exe

windows7_x64

1

41ad23005b...68.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41ad23005bbe90456dc77d2fb6f2f3cf318e29973beeb0dffb1ce39e0fc6e768

  • Size

    244KB

  • Sample

    220708-fmxh8scea3

  • MD5

    78459082386ad6ee8c0a30d476f1dca1

  • SHA1

    a8fc9dca26b05ac93187d25086e006d150870e60

  • SHA256

    41ad23005bbe90456dc77d2fb6f2f3cf318e29973beeb0dffb1ce39e0fc6e768

  • SHA512

    3f35a66b905bbd2208ba6be3f84aa053613150a7b2287d3d56046de3ca686e9582d27199e96c739ac92013f025848918414c970fd04a91de9be10d6df1e8aa74

Score
10/10
lockyransomwaresuricata

Malware Config

Targets

    • Target

      41ad23005bbe90456dc77d2fb6f2f3cf318e29973beeb0dffb1ce39e0fc6e768

    • Size

      244KB

    • MD5

      78459082386ad6ee8c0a30d476f1dca1

    • SHA1

      a8fc9dca26b05ac93187d25086e006d150870e60

    • SHA256

      41ad23005bbe90456dc77d2fb6f2f3cf318e29973beeb0dffb1ce39e0fc6e768

    • SHA512

      3f35a66b905bbd2208ba6be3f84aa053613150a7b2287d3d56046de3ca686e9582d27199e96c739ac92013f025848918414c970fd04a91de9be10d6df1e8aa74

    Score
    10/10
    lockyransomwaresuricata

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • suricata: ET MALWARE Ransomware Locky CnC Beacon 21 May

      suricata: ET MALWARE Ransomware Locky CnC Beacon 21 May

      suricata

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks