Overview

overview

10

Static

static

59f6b5e8b1...ef.exe

windows7-x64

10

59f6b5e8b1...ef.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220721-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24-07-2022 02:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef.exe

  • Size

    162KB

  • MD5

    8c8029ce098e206eb99fbdd4f1ebe3b1

  • SHA1

    48cffe0fba17b6ac8c7b4a1199de151f9e97d846

  • SHA256

    59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef

  • SHA512

    d4e0f13be2c348943d2e1f8a9cfb27216768a2048af3d610b56e8bfd32923a13cf635e7b6395f77e1bdc9ab1ee82ea28e6b6672d5c2092895a0e3b2baee059cb

Score
10/10
lockyransomwaresuricata

Malware Config

Signatures

  • Locky

    Ransomware strain released in 2016, with advanced features like anti-analysis.

    ransomwarelocky
  • suricata: ET MALWARE Ransomware Locky CnC Beacon

    suricata: ET MALWARE Ransomware Locky CnC Beacon

    suricata

Processes

  • C:\Users\Admin\AppData\Local\Temp\59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef.exe
    "C:\Users\Admin\AppData\Local\Temp\59f6b5e8b1829902c9b915c3c7a6f8842445e4f9508710d4bcacdb1f80fdc2ef.exe"
    1⤵
      PID:1576

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1576-130-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1576-132-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download
    • memory/1576-133-0x0000000000400000-0x000000000042D000-memory.dmp
      Filesize

      180KB

      Download