locky | 45fe958019227f7a5e96d36b522178cd3ab24a99decfe517e5a2e91806c83016 | Triage

Submit
Reports

Overview

overview

Static

static

3

d7f039531c...18.dll

windows7-x64

d7f039531c...18.dll

windows10-2004-x64

Sharing

General

Target

d7f039531ce2db4f604ca2a40f8ca828_JaffaCakes118
Size

145KB
Sample

240910-kyqbhswamj
MD5

d7f039531ce2db4f604ca2a40f8ca828
SHA1

6c1c739d5d6fd0c04eac220b46646d3a5d5736c8
SHA256

45fe958019227f7a5e96d36b522178cd3ab24a99decfe517e5a2e91806c83016
SHA512

d095e6185ca9aa60df80066c8476604f1815ee9a4be3dd6c4fb8c4809f33974bb277da97d74fed11dbf7c9843ab6f48bb1312e2afefa148ecbb06d55bf551af0
SSDEEP

3072:t9T7LiXhC06rUwo3ueS8uYGEx8r8npU5f4rAFy/Vruanzg:/O0XrUwo65YGEeepUItru

Score

10^/10

locky defense_evasion discovery execution impact ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d7f039531ce2db4f604ca2a40f8ca828_JaffaCakes118.dll

Resource

win7-20240704-en

locky defense_evasion discovery execution impact ransomware

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

d7f039531ce2db4f604ca2a40f8ca828_JaffaCakes118.dll

Resource

win10v2004-20240802-en

locky defense_evasion discovery execution impact ransomware

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  d7f039531ce2db4f604ca2a40f8ca828_JaffaCakes118
- Size
  
  145KB
- MD5
  
  d7f039531ce2db4f604ca2a40f8ca828
- SHA1
  
  6c1c739d5d6fd0c04eac220b46646d3a5d5736c8
- SHA256
  
  45fe958019227f7a5e96d36b522178cd3ab24a99decfe517e5a2e91806c83016
- SHA512
  
  d095e6185ca9aa60df80066c8476604f1815ee9a4be3dd6c4fb8c4809f33974bb277da97d74fed11dbf7c9843ab6f48bb1312e2afefa148ecbb06d55bf551af0
- SSDEEP
  
  3072:t9T7LiXhC06rUwo3ueS8uYGEx8r8npU5f4rAFy/Vruanzg:/O0XrUwo65YGEeepUItru
Score

10^/10

locky defense_evasion discovery execution impact ransomware
- Locky
  Ransomware strain released in 2016, with advanced features like anti-analysis.
  ransomware locky
- Deletes shadow copies
  Ransomware often targets backup files to inhibit system recovery.
  ransomware defense_evasion impact execution
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Windows Management Instrumentation

Persistence

Privilege Escalation

Defense Evasion

Direct Volume Access

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Inhibit System Recovery

Tasks

static1

behavioral1

lockydefense_evasiondiscoveryexecutionimpactransomware

behavioral2

lockydefense_evasiondiscoveryexecutionimpactransomware

© 2018-2024

Terms | Privacy