Resubmissions
22/08/2024, 18:43
240822-xc563asamh1021/08/2024, 17:16
240821-vtjnaathnq1030/06/2024, 00:59
240630-bcjr6svbkk1020/06/2024, 02:02
240620-cf43ysxbnk1020/06/2024, 01:44
240620-b5v1xawemk1019/06/2024, 01:10
240619-bjmseavfmp1018/06/2024, 20:40
240618-zfwsxawdpa1018/06/2024, 13:45
240618-q2vcjawdle10Analysis
- max time kernel
150s - max time network
128s - platform
windows7_x64 - resource
win7-20240611-en - resource tags
- submitted
19/06/2024, 01:10
General
- Target Documents/Ransomware.Locky/Locky.exe
- Size 180KB
- Sample240619-bjmseavfmp
- SHA256 bc98c8b22461a2c2631b2feec399208fdc4ecd1cd2229066c2f385caa958daa3
Score
10/10
Malware Config
Signatures
- Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.Locky\Locky.exe"C:\Users\Admin\AppData\Local\Temp\Documents\Ransomware.Locky\Locky.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2280-0-0x0000000000220000-0x0000000000224000-memory.dmp
memory/2280-1-0x0000000000220000-0x0000000000224000-memory.dmp
memory/2280-2-0x0000000000400000-0x00000000007D1000-memory.dmp
memory/2280-4-0x0000000000400000-0x00000000007D1000-memory.dmp
memory/2280-8-0x0000000000400000-0x00000000007D1000-memory.dmp
memory/2280-10-0x0000000000400000-0x00000000007D1000-memory.dmp
memory/2280-12-0x0000000000400000-0x00000000007D1000-memory.dmp
memory/2280-13-0x0000000000400000-0x00000000007D1000-memory.dmp