General
-
Target
2024-04-10_76b8ec48d5655298056dbb55a699cff7_ransomlock
-
Size
473KB
-
Sample
240410-xea4psgd33
-
MD5
76b8ec48d5655298056dbb55a699cff7
-
SHA1
3396d7272a1f49b61ac21aebe673cc85063d6ad5
-
SHA256
fc0963e5aaabefa839caad705a22ee9abf1bf82f802f000cd8f89d325e3872e9
-
SHA512
de0fc094406a6a112a3604a6826b12d91e8f9edf43dba93992f631d6f43681e499cf204a2159cb4f2716cd4998601105aac6242eec874eff46f5c59899cd9194
-
SSDEEP
12288:pMSU4joci8M6PW1GVFeFd60DFUyheJYM:iSUCpM2W1GvgmyeJv
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_76b8ec48d5655298056dbb55a699cff7_ransomlock.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_76b8ec48d5655298056dbb55a699cff7_ransomlock.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-04-10_76b8ec48d5655298056dbb55a699cff7_ransomlock
-
Size
473KB
-
MD5
76b8ec48d5655298056dbb55a699cff7
-
SHA1
3396d7272a1f49b61ac21aebe673cc85063d6ad5
-
SHA256
fc0963e5aaabefa839caad705a22ee9abf1bf82f802f000cd8f89d325e3872e9
-
SHA512
de0fc094406a6a112a3604a6826b12d91e8f9edf43dba93992f631d6f43681e499cf204a2159cb4f2716cd4998601105aac6242eec874eff46f5c59899cd9194
-
SSDEEP
12288:pMSU4joci8M6PW1GVFeFd60DFUyheJYM:iSUCpM2W1GvgmyeJv
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-