86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f | Triage

Sharing

General

Target

$uckyLocker.exe
Size

414KB
Sample

240817-gbthwazdje
MD5

c850f942ccf6e45230169cc4bd9eb5c8
SHA1

51c647e2b150e781bd1910cac4061a2cee1daf89
SHA256

86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f
SHA512

2b3890241b8c8690aab0aed347daa778aba20f29f76e8b79b02953b6252324317520b91ea60d3ef73e42ad403f7a6e0e3f2a057799f21ed447dae7096b2f47d9
SSDEEP

6144:Av+lDAAB6fm00rx/Qdd1QkfRLT+vLtls6LEmynPsVpw/pcPk19:RdAAB6Mk1HfRLqzPlLEmynPsVpwBT

Score

8^/10

discovery evasion ransomware

Malware Config

Targets

- Target
  
  $uckyLocker.exe
- Size
  
  414KB
- MD5
  
  c850f942ccf6e45230169cc4bd9eb5c8
- SHA1
  
  51c647e2b150e781bd1910cac4061a2cee1daf89
- SHA256
  
  86e0eac8c5ce70c4b839ef18af5231b5f92e292b81e440193cdbdc7ed108049f
- SHA512
  
  2b3890241b8c8690aab0aed347daa778aba20f29f76e8b79b02953b6252324317520b91ea60d3ef73e42ad403f7a6e0e3f2a057799f21ed447dae7096b2f47d9
- SSDEEP
  
  6144:Av+lDAAB6fm00rx/Qdd1QkfRLT+vLtls6LEmynPsVpw/pcPk19:RdAAB6Mk1HfRLqzPlLEmynPsVpwBT
Score

8^/10

discovery evasion ransomware
- Disables Task Manager via registry modification
  evasion
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

discoveryevasionransomware

behavioral2

discoveryevasionransomware