General

  • Target
    21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6.bin
  • Size 372KB
  • Sample220708-nrtbdacbck
  • SHA256 21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6.bin
    • Size 372KB
    • SHA256 21a0201874af80436dc0a36e5cbaf7da9b75217b3e39b712f3850729cf47deb6
    • MD5 SHA1 SHA512
    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

    • Locky (Osiris variant)

      Variant of the Locky ransomware seen in the wild since early 2017.

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Adds Run key to start application

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks