Resubmissions

18/09/2022, 19:48

220918-yh3tkaffal10

18/09/2022, 18:14

220918-wveamafebk10

General

  • Target
    V7bTrYJ4lbO6OS.zk
  • Size 159KB
  • Sample220918-yh3tkaffal
  • SHA256 f329ea2c754ab196d15c20fbf9abd722fa63630631144c5a409bd2a20172196b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      V7bTrYJ4lbO6OS.zk
    • Size 159KB
    • SHA256 f329ea2c754ab196d15c20fbf9abd722fa63630631144c5a409bd2a20172196b
    • MD5 SHA1 SHA512 SSDEEP
    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

    • Locky (Osiris variant)

      Variant of the Locky ransomware seen in the wild since early 2017.

    • Blocklisted process makes network request

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

    • Adds Run key to start application

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks