Overview

overview

10

Static

static

svchost.exe

windows7_x64

10

svchost.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ab3999b9aa14d0eae351803736103b76a33734805b8c8193a72d06fc6986dcd

  • Size

    50KB

  • Sample

    220712-plpaxaaacp

  • MD5

    21381fa3faa8f149a1b4414f39a10cbe

  • SHA1

    9107a39deeb14bfa91859c98d932d4004c5b6fcb

  • SHA256

    4ab3999b9aa14d0eae351803736103b76a33734805b8c8193a72d06fc6986dcd

  • SHA512

    59dc43980e31c88497cd07d8eedbc6e2982b4488b5e454a22378addbb8b33673ee878d7d613e2bafe469c6b201c67841613a0f470a0cddbb38ac20f73e84c27d

Score
10/10
lockyransomwaresuricata

Malware Config

Targets

    • Target

      svchost.exe

    • Size

      102KB

    • MD5

      c63a537090d34f29daadbef221637435

    • SHA1

      ba17638bac43e6e3b2faf4bf3a22197b99d8a390

    • SHA256

      28046c14ea3325885ee1e731cd0bcf9f38445df02675836b851cb2ae94c050eb

    • SHA512

      d222c1f42475a242f1c9a379f9d828a8f8977648d618a0201fb7232a43759f5d7958e311396d41ea7d8b363588b19ac5e137c88160979d7e5dfc3b42d328e95d

    Score
    10/10
    lockyransomwaresuricata

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • suricata: ET MALWARE Ransomware Locky CnC Beacon

      suricata: ET MALWARE Ransomware Locky CnC Beacon

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks