General

  • Target
    b65b194c6cc134d56ba3acdcc7bd3051
  • Size 328KB
  • Sample240306-dn32asba37
  • SHA256 acd6287f7fa2e10f6cd00f8fc8e9d8aa6553b2e95186c3190958f5ef40259f66
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      b65b194c6cc134d56ba3acdcc7bd3051
    • Size 328KB
    • SHA256 acd6287f7fa2e10f6cd00f8fc8e9d8aa6553b2e95186c3190958f5ef40259f66
    • MD5 SHA1 SHA512 SSDEEP
    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

    • Locky (Osiris variant)

      Variant of the Locky ransomware seen in the wild since early 2017.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks