Overview

overview

10

Static

static

3

216c144dc5...db.dll

windows7-x64

10

216c144dc5...db.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    216c144dc51c315c220864dbba672932664eb031b63bc779bf5b35fb9fa239db

  • Size

    127KB

  • Sample

    240424-q81swsbb51

  • MD5

    be1377d90fdeeb0bff1da2a19c3c6d07

  • SHA1

    e3bb515c055fecee1fd2c7a6c444a8e5a0465044

  • SHA256

    216c144dc51c315c220864dbba672932664eb031b63bc779bf5b35fb9fa239db

  • SHA512

    79495f17bb10e7c4da026edcbc065cb6e681736ddff2cacbe61956f4e86c286dba22044284365985b43e079292b06edf296dc1ade608d2d2631d94d9b65c4d7e

  • SSDEEP

    3072:imFa0hGJ5yhppWMy7qWrH4CJWA+26begdDywQp3LnnBphg:wMUARQnr6X26fDvMbnB0

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      216c144dc51c315c220864dbba672932664eb031b63bc779bf5b35fb9fa239db

    • Size

      127KB

    • MD5

      be1377d90fdeeb0bff1da2a19c3c6d07

    • SHA1

      e3bb515c055fecee1fd2c7a6c444a8e5a0465044

    • SHA256

      216c144dc51c315c220864dbba672932664eb031b63bc779bf5b35fb9fa239db

    • SHA512

      79495f17bb10e7c4da026edcbc065cb6e681736ddff2cacbe61956f4e86c286dba22044284365985b43e079292b06edf296dc1ade608d2d2631d94d9b65c4d7e

    • SSDEEP

      3072:imFa0hGJ5yhppWMy7qWrH4CJWA+26begdDywQp3LnnBphg:wMUARQnr6X26fDvMbnB0

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

      ransomware

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

2
T1070

File Deletion

2
T1070.004

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Inhibit System Recovery

2
T1490

Defacement

1
T1491

Resource Development

Reconnaissance

Tasks