Overview

overview

10

Static

static

10

2024-03-14...ky.exe

windows7-x64

10

2024-03-14...ky.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-03-14_708555e98eff9db5bbdd9a072f3e95b4_karagany_locky

  • Size

    99KB

  • Sample

    240314-nstzasba4z

  • MD5

    708555e98eff9db5bbdd9a072f3e95b4

  • SHA1

    1203df5d8af16bf77277be6cade5e605a48c08c4

  • SHA256

    c46502de301fafe0200b076ab9ea088ca4abbccff0062b05cad4b363a1f9bfa1

  • SHA512

    2d31c293fb661d241b104ef9b2c25830fdd714fa4250717b5bf0065da6fe043cf94af4fa7fb93a42b767d50798976f0e736a1343d0876e29f7369df8805106f7

  • SSDEEP

    3072:hAZ+tKGBOs0kvuRNpDB9GVYJuQC9rLoIq9Mt14wzB:CgQGksxapN9bJuGIq9MQwzB

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      2024-03-14_708555e98eff9db5bbdd9a072f3e95b4_karagany_locky

    • Size

      99KB

    • MD5

      708555e98eff9db5bbdd9a072f3e95b4

    • SHA1

      1203df5d8af16bf77277be6cade5e605a48c08c4

    • SHA256

      c46502de301fafe0200b076ab9ea088ca4abbccff0062b05cad4b363a1f9bfa1

    • SHA512

      2d31c293fb661d241b104ef9b2c25830fdd714fa4250717b5bf0065da6fe043cf94af4fa7fb93a42b767d50798976f0e736a1343d0876e29f7369df8805106f7

    • SSDEEP

      3072:hAZ+tKGBOs0kvuRNpDB9GVYJuQC9rLoIq9Mt14wzB:CgQGksxapN9bJuGIq9MQwzB

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Detects command variations typically used by ransomware

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks