Overview

overview

10

Static

static

3

b65b194c6c...51.exe

windows7-x64

10

b65b194c6c...51.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b65b194c6cc134d56ba3acdcc7bd3051

  • Size

    328KB

  • Sample

    240306-dn32asba37

  • MD5

    b65b194c6cc134d56ba3acdcc7bd3051

  • SHA1

    98c7e593d956776addd16d0d3f4647d5d69e8fcc

  • SHA256

    acd6287f7fa2e10f6cd00f8fc8e9d8aa6553b2e95186c3190958f5ef40259f66

  • SHA512

    a076f13f9b9c07bbf34ea9105d63ae24c2996f1b4cb77f58c3b080e333cb4f19bcbf75d1f3bafe34ee85defed00be41fd22c7af859ca3473d96e3764da202339

  • SSDEEP

    6144:WLTEviCT+6HQEs6fwpOqb+kO506PqR0zhIx8mN8e9X5Zlev:diCT+gzGn+tqieNfJS

Score
10/10
lockylocky_osirisransomware

Malware Config

Targets

    • Target

      b65b194c6cc134d56ba3acdcc7bd3051

    • Size

      328KB

    • MD5

      b65b194c6cc134d56ba3acdcc7bd3051

    • SHA1

      98c7e593d956776addd16d0d3f4647d5d69e8fcc

    • SHA256

      acd6287f7fa2e10f6cd00f8fc8e9d8aa6553b2e95186c3190958f5ef40259f66

    • SHA512

      a076f13f9b9c07bbf34ea9105d63ae24c2996f1b4cb77f58c3b080e333cb4f19bcbf75d1f3bafe34ee85defed00be41fd22c7af859ca3473d96e3764da202339

    • SSDEEP

      6144:WLTEviCT+6HQEs6fwpOqb+kO506PqR0zhIx8mN8e9X5Zlev:diCT+gzGn+tqieNfJS

    Score
    10/10
    lockylocky_osirisransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Locky (Osiris variant)

      Variant of the Locky ransomware seen in the wild since early 2017.

      ransomwarelocky_osiris

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

1
T1491

Resource Development

Reconnaissance

Tasks