General
- Target V7bTrYJ4lbO6OS.zk
- Size 159KB
- Sample220918-yh3tkaffal
- SHA256 f329ea2c754ab196d15c20fbf9abd722fa63630631144c5a409bd2a20172196b
- MD5 7932ee5fa6f83b149569752c47e04b87
- SHA1 6eb115feadc5808507fb5a666dd18aa89a45616c
- SHA512 17ba26e69f7536f5adaa52454fbd407338be61d97bc396baa591de9fa19aab3e539b4ca32059b2ddb1b901ac7ecd341dff9ead706fc0d058086e6b3795642f58
- SSDEEP 3072:pusrpo1j49JvKa0ePbh37E6ZO78buZKxrF:ZQcvKpE37E6nmKhF
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
V7bTrYJ4lbO6OS.dll
Resource
win7-20220901-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
V7bTrYJ4lbO6OS.dll
Resource
win10v2004-20220812-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target V7bTrYJ4lbO6OS.zk
- Size 159KB
- SHA256 f329ea2c754ab196d15c20fbf9abd722fa63630631144c5a409bd2a20172196b
- MD5 7932ee5fa6f83b149569752c47e04b87
- SHA1 6eb115feadc5808507fb5a666dd18aa89a45616c
- SHA512 17ba26e69f7536f5adaa52454fbd407338be61d97bc396baa591de9fa19aab3e539b4ca32059b2ddb1b901ac7ecd341dff9ead706fc0d058086e6b3795642f58
- SSDEEP 3072:pusrpo1j49JvKa0ePbh37E6ZO78buZKxrF:ZQcvKpE37E6nmKhF
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Locky (Osiris variant)
Variant of the Locky ransomware seen in the wild since early 2017.
-
Blocklisted process makes network request
-
Modifies extensions of user files
Ransomware generally changes the extension on encrypted files.
-
Adds Run key to start application
-
Sets desktop wallpaper using registry