Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20220715-en -
resource tags
arch:x64arch:x86image:win7-20220715-enlocale:en-usos:windows7-x64system -
submitted
24-07-2022 02:16
Static task
static1
Behavioral task
behavioral1
Sample
59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef.exe
Resource
win10v2004-20220721-en
General
-
Target
59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef.exe
-
Size
162KB
-
MD5
8c8029ce098e206eb99fbdd4f1ebe3b1
-
SHA1
48cffe0fba17b6ac8c7b4a1199de151f9e97d846
-
SHA256
59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef
-
SHA512
d4e0f13be2c348943d2e1f8a9cfb27216768a2048af3d610b56e8bfd32923a13cf635e7b6395f77e1bdc9ab1ee82ea28e6b6672d5c2092895a0e3b2baee059cb
Malware Config
Signatures
-
Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
suricata: ET MALWARE Ransomware Locky CnC Beacon
suricata: ET MALWARE Ransomware Locky CnC Beacon
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1064-54-0x00000000760E1000-0x00000000760E3000-memory.dmpFilesize
8KB
-
memory/1064-55-0x0000000000400000-0x000000000042D000-memory.dmpFilesize
180KB
-
memory/1064-57-0x0000000000400000-0x000000000042D000-memory.dmpFilesize
180KB
-
memory/1064-58-0x0000000000400000-0x000000000042D000-memory.dmpFilesize
180KB