locky | 45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c | Triage

Submit
Reports

Overview

overview

Static

static

3

45a379ee5c...4c.dll

windows7-x64

45a379ee5c...4c.dll

windows10-2004-x64

Sharing

General

Target

45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c
Size

127KB
Sample

240410-z1vrcaef5x
MD5

685fd532cd11d534b3179c56dfab29cf
SHA1

a83a3fec900e523541476d03f75e26a05b3d524f
SHA256

45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c
SHA512

2d9dc2ad4fa5b93d47c32e4fe5868dcb0340289da77c1dce6e25bc7aede4738298fc2597de0b2b883a1bd0953e2130dd565d22123504bd0b738508cce706d8b1
SSDEEP

3072:0uFa0hGJ5yhppWMy7qWrH4CJWA+26begdDywQp3LnnBphN:+MUARQnr6X26fDvMbnBZ

Score

10^/10

locky ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c.dll

Resource

win7-20240221-en

locky ransomware

windows7-x64

12 signatures

150 seconds

Behavioral task

behavioral2

Sample

45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c.dll

Resource

win10v2004-20240226-en

locky ransomware

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c
- Size
  
  127KB
- MD5
  
  685fd532cd11d534b3179c56dfab29cf
- SHA1
  
  a83a3fec900e523541476d03f75e26a05b3d524f
- SHA256
  
  45a379ee5c48fd976a80e2334eeaf27636d5948b6ec20f794a55ab257e22bd4c
- SHA512
  
  2d9dc2ad4fa5b93d47c32e4fe5868dcb0340289da77c1dce6e25bc7aede4738298fc2597de0b2b883a1bd0953e2130dd565d22123504bd0b738508cce706d8b1
- SSDEEP
  
  3072:0uFa0hGJ5yhppWMy7qWrH4CJWA+26begdDywQp3LnnBphN:+MUARQnr6X26fDvMbnBZ
Score

10^/10

locky ransomware
- Locky
  Ransomware strain released in 2016, with advanced features like anti-analysis.
  ransomware locky
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Inhibit System Recovery

Tasks

static1

behavioral1

lockyransomware

behavioral2

lockyransomware

© 2018-2024

Terms | Privacy