Overview

overview

10

Static

static

3

844555caf1...SA.exe

windows7-x64

10

844555caf1...SA.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    844555caf160300f82e2bd08a3ee84aac093f40f7223177ef89f1f2bb55761cc.CR.IA.SA.OA

  • Size

    478KB

  • Sample

    240606-f4gjcaad38

  • MD5

    8544bf5623553a7bc20257448627a91f

  • SHA1

    bcc403ce64a5c7c3e195db776ba66f48f4746337

  • SHA256

    8a034c4b01d34bdd3aa03eca78c273837814092810f765dd5e909892579a929c

  • SHA512

    69cce231cc3c96c3c805b948eeee8f6bc46caa0ca47bfa94689cf704f3aca318cad615a257bc03701c6ae38712c83d3d9ebcef2b4c4621fe176536840d587a52

  • SSDEEP

    12288:KxvXqjpRbxF8ZshB4dq4yfndmLhCiQ78ZhZ7U:copRbxphIemd

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      844555caf160300f82e2bd08a3ee84aac093f40f7223177ef89f1f2bb55761cc.CR.IA.SA.OA

    • Size

      478KB

    • MD5

      8544bf5623553a7bc20257448627a91f

    • SHA1

      bcc403ce64a5c7c3e195db776ba66f48f4746337

    • SHA256

      8a034c4b01d34bdd3aa03eca78c273837814092810f765dd5e909892579a929c

    • SHA512

      69cce231cc3c96c3c805b948eeee8f6bc46caa0ca47bfa94689cf704f3aca318cad615a257bc03701c6ae38712c83d3d9ebcef2b4c4621fe176536840d587a52

    • SSDEEP

      12288:KxvXqjpRbxF8ZshB4dq4yfndmLhCiQ78ZhZ7U:copRbxphIemd

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Deletes itself

    • Sets desktop wallpaper using registry

      ransomware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks