General

  • Target

    2024-05-30_6df9fb974921b6450a0dc2a052f32279_locky

  • Size

    517KB

  • Sample

    240530-erlrvsfa35

  • MD5

    6df9fb974921b6450a0dc2a052f32279

  • SHA1

    c4f14c84ebde71755248ea68736fa05713c798b6

  • SHA256

    0152f123ede46e76fb1193b1393b8e34dd2f2718ee108794414c2cc7734c73eb

  • SHA512

    4936a3c6a66804392e0248c4fc1f9ce0f68238bf639a8245681485cc75dfc7269fc103b7bcdfa959870c00145ab12a0d0dc1745cea55532cae38e9566ac59805

  • SSDEEP

    12288:zVRm47ugq9QLXzNWVn4Fkl6BQ2yLhxPtIS4GudgBXllbXtdjy:zVzzzjNO4FkUQ2yL7PtIdGudqlb9djy

Malware Config

Targets

    • Target

      2024-05-30_6df9fb974921b6450a0dc2a052f32279_locky

    • Size

      517KB

    • MD5

      6df9fb974921b6450a0dc2a052f32279

    • SHA1

      c4f14c84ebde71755248ea68736fa05713c798b6

    • SHA256

      0152f123ede46e76fb1193b1393b8e34dd2f2718ee108794414c2cc7734c73eb

    • SHA512

      4936a3c6a66804392e0248c4fc1f9ce0f68238bf639a8245681485cc75dfc7269fc103b7bcdfa959870c00145ab12a0d0dc1745cea55532cae38e9566ac59805

    • SSDEEP

      12288:zVRm47ugq9QLXzNWVn4Fkl6BQ2yLhxPtIS4GudgBXllbXtdjy:zVzzzjNO4FkUQ2yL7PtIdGudqlb9djy

    • Locky (Lukitus variant)

      Variant of the Locky ransomware seen in the wild since late 2017.

    • Deletes itself

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks