Overview

overview

10

Static

static

3

bc98c8b224...aa3.7z

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bc98c8b22461a2c2631b2feec399208fdc4ecd1cd2229066c2f385caa958daa3.7z

  • Size

    119KB

  • Sample

    241110-3npw4s1jbq

  • MD5

    da6ca7ee9669864f267d835c194d1192

  • SHA1

    672baeab0fbbc1ea062112e45bca08d5956ce9c7

  • SHA256

    b18b392a91a270fa3455c68dc3f9332938ae35fe2d419e4fa114974267b29198

  • SHA512

    f278ab553b23d08658bc4ee3d289362a9f960313b120be2fcd397b59d3c6ce807bb8bc1c1434518cf2d8dc8a4a9edb64550d9278e0d7e8b473d15e37a17ccaab

  • SSDEEP

    3072:fJyaCVbqBxwGZWpwvo646hB4ulrrC+t2JPawre9MCa6F/h:QaCIL0pwvJ46/r2AhwWMC9/

Score
10/10
lockydefense_evasiondiscoveryransomware

Malware Config

Targets

    • Target

      bc98c8b22461a2c2631b2feec399208fdc4ecd1cd2229066c2f385caa958daa3.7z

    • Size

      119KB

    • MD5

      da6ca7ee9669864f267d835c194d1192

    • SHA1

      672baeab0fbbc1ea062112e45bca08d5956ce9c7

    • SHA256

      b18b392a91a270fa3455c68dc3f9332938ae35fe2d419e4fa114974267b29198

    • SHA512

      f278ab553b23d08658bc4ee3d289362a9f960313b120be2fcd397b59d3c6ce807bb8bc1c1434518cf2d8dc8a4a9edb64550d9278e0d7e8b473d15e37a17ccaab

    • SSDEEP

      3072:fJyaCVbqBxwGZWpwvo646hB4ulrrC+t2JPawre9MCa6F/h:QaCIL0pwvJ46/r2AhwWMC9/

    Score
    10/10
    lockydefense_evasiondiscoveryransomware

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

      ransomwarelocky

    • Locky family

      locky

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks