locky | 613948eba26190b11250c6ce115f1c99712f79d5234269354a32d6052a873fbf | Triage

Sharing

General

Target

a876e3afe76dec729de810f4110f9877_JaffaCakes118
Size

640KB
Sample

240614-hzn4qszbrc
MD5

a876e3afe76dec729de810f4110f9877
SHA1

d465504e258440f3c13d9b691bd9f761ef73006c
SHA256

613948eba26190b11250c6ce115f1c99712f79d5234269354a32d6052a873fbf
SHA512

e20417af913c2f3d4fdb0b8a01ca4086ce8f8232f5ab0890a77cd40519b15dc56e102d3a64cd48195fd6b85a7346c5235864dd753291d0449206dc433e8b116f
SSDEEP

12288:53c3zZfZfZfZfZfZfZmZ2XsHUKwbNWuTncBxPMRS8SUC9H4jlNEz9vBiptAE43/A:2jZfZfZfZfZfZfZmZ2XsHUK8ni0U8SUD

Score

10^/10

locky ransomware

Malware Config

Targets

- Target
  
  a876e3afe76dec729de810f4110f9877_JaffaCakes118
- Size
  
  640KB
- MD5
  
  a876e3afe76dec729de810f4110f9877
- SHA1
  
  d465504e258440f3c13d9b691bd9f761ef73006c
- SHA256
  
  613948eba26190b11250c6ce115f1c99712f79d5234269354a32d6052a873fbf
- SHA512
  
  e20417af913c2f3d4fdb0b8a01ca4086ce8f8232f5ab0890a77cd40519b15dc56e102d3a64cd48195fd6b85a7346c5235864dd753291d0449206dc433e8b116f
- SSDEEP
  
  12288:53c3zZfZfZfZfZfZfZmZ2XsHUKwbNWuTncBxPMRS8SUC9H4jlNEz9vBiptAE43/A:2jZfZfZfZfZfZfZmZ2XsHUK8ni0U8SUD
Score

10^/10

locky ransomware
- Locky
  Ransomware strain released in 2016, with advanced features like anti-analysis.
  ransomware locky
- Deletes itself
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

lockyransomware

behavioral2

lockyransomware