Overview

overview

10

Static

static

1

390ed1dde4...91.exe

windows7-x64

10

Resubmissions

13-03-2023 15:08

230313-sjcqwada2v 10

19-04-2022 02:37

220419-c4a5sabhb8 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891

  • Size

    657KB

  • Sample

    230313-sjcqwada2v

  • MD5

    0d0823d9a5d000b80e27090754f59ee5

  • SHA1

    b1f495b707ffaf53188c13f19a487dd94e7a0735

  • SHA256

    390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891

  • SHA512

    52a4ae72e2685a6b6d274388b636fe63d96e5545475e521e9e250d56d4593657061502f00c6b90f5e54d05a63a9301509852804b9d705307c03f8fff739d3964

  • SSDEEP

    12288:JOSdwPgM57sv8ZqMM+ARd9rFk1S4e/NZS3peecnysPoBicrOl:JOSa2EZqeIPMelY3Cypicr

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891

    • Size

      657KB

    • MD5

      0d0823d9a5d000b80e27090754f59ee5

    • SHA1

      b1f495b707ffaf53188c13f19a487dd94e7a0735

    • SHA256

      390ed1dde4ff03adfcf67c59ee02567ac5665bb5e029eaebf0332bc81e4d1891

    • SHA512

      52a4ae72e2685a6b6d274388b636fe63d96e5545475e521e9e250d56d4593657061502f00c6b90f5e54d05a63a9301509852804b9d705307c03f8fff739d3964

    • SSDEEP

      12288:JOSdwPgM57sv8ZqMM+ARd9rFk1S4e/NZS3peecnysPoBicrOl:JOSa2EZqeIPMelY3Cypicr

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Deletes itself

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

1
T1491

Tasks