Overview

overview

10

Static

static

3

90a7f7065d...74.exe

windows10-1703-x64

10

90a7f7065d...74.exe

windows7-x64

1

90a7f7065d...74.exe

windows10-2004-x64

1

90a7f7065d...74.exe

windows11-21h2-x64

1

Resubmissions

25-06-2024 11:46

240625-nxaffsxfme 10

25-06-2024 11:35

240625-nqbpyaxcke 10

24-06-2024 09:07

240624-k3smfaxgkq 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674

  • Size

    236KB

  • Sample

    240625-nqbpyaxcke

  • MD5

    2fde1e85e1ead98a8c0e1ca7eda2a243

  • SHA1

    4e195c7dc0d7bd995b81fc481dd300e966481201

  • SHA256

    90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674

  • SHA512

    b56a5d33fd6f99d092e5a2b7d332c0632eb4354a1c64cfb66b4a9997e5f6e0fd9d019b775705e89fe94c26b41762e11ede9dda150fc19a857ca9e2cfc05b65b2

  • SSDEEP

    6144:FXtIh3WC7HpTBJNDrSfdH/qiNMxsJSoR:FXtsPpTrhgdHChxsJN

Score
10/10
lockyransomware

Malware Config

Targets

    • Target

      90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674

    • Size

      236KB

    • MD5

      2fde1e85e1ead98a8c0e1ca7eda2a243

    • SHA1

      4e195c7dc0d7bd995b81fc481dd300e966481201

    • SHA256

      90a7f7065d8dd058ab7049cd3f0c8788ae8950a8d2366a372571dbb800590674

    • SHA512

      b56a5d33fd6f99d092e5a2b7d332c0632eb4354a1c64cfb66b4a9997e5f6e0fd9d019b775705e89fe94c26b41762e11ede9dda150fc19a857ca9e2cfc05b65b2

    • SSDEEP

      6144:FXtIh3WC7HpTBJNDrSfdH/qiNMxsJSoR:FXtsPpTrhgdHChxsJN

    Score
    10/10
    lockyransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Sets desktop wallpaper using registry

      ransomware
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Defacement

1
T1491

Resource Development

Reconnaissance

Tasks