General

  • Target

    2024-05-30_f9a17a26036fe111324030e27e891cea_locky

  • Size

    517KB

  • Sample

    240530-e7r9kseg6z

  • MD5

    f9a17a26036fe111324030e27e891cea

  • SHA1

    bf7cdc42f6ac5985be37819dcd2f5bbfedd582e1

  • SHA256

    d7d0561555b788d2048f7a6904318c44e01a16299bb3177250c4478170d7fa51

  • SHA512

    f0246f51c92334c60ad75fc26bd5fc016f7a8d14d1b55018bd98c9ae1f95cfdc2099d91bdef82a2523890777117be3f2db3c7ce993e04f1a1e48aee70a09868a

  • SSDEEP

    12288:uVRm47ugq9QLXzNWVn4Fkl6BQ2yLhxPtIS4GudgBXllbXtdj:uVzzzjNO4FkUQ2yL7PtIdGudqlb9dj

Malware Config

Targets

    • Target

      2024-05-30_f9a17a26036fe111324030e27e891cea_locky

    • Size

      517KB

    • MD5

      f9a17a26036fe111324030e27e891cea

    • SHA1

      bf7cdc42f6ac5985be37819dcd2f5bbfedd582e1

    • SHA256

      d7d0561555b788d2048f7a6904318c44e01a16299bb3177250c4478170d7fa51

    • SHA512

      f0246f51c92334c60ad75fc26bd5fc016f7a8d14d1b55018bd98c9ae1f95cfdc2099d91bdef82a2523890777117be3f2db3c7ce993e04f1a1e48aee70a09868a

    • SSDEEP

      12288:uVRm47ugq9QLXzNWVn4Fkl6BQ2yLhxPtIS4GudgBXllbXtdj:uVzzzjNO4FkUQ2yL7PtIdGudqlb9dj

    • Locky (Lukitus variant)

      Variant of the Locky ransomware seen in the wild since late 2017.

    • Deletes itself

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks