locky | 749e8c87bc157a7dc7a9c7427c41dbcd1f087250914caedd3aaa93982af1c433 | Triage

Submit
Reports

Overview

overview

Static

static

3

aca7ca6f09...18.exe

windows7-x64

7

aca7ca6f09...18.exe

windows10-2004-x64

Sharing

General

Target

aca7ca6f090aba613f6a701f0b2bac1c_JaffaCakes118
Size

202KB
Sample

241128-rvaj8awlel
MD5

aca7ca6f090aba613f6a701f0b2bac1c
SHA1

7d889d00e5cf9a09800faa450fcbfa17eadc5664
SHA256

749e8c87bc157a7dc7a9c7427c41dbcd1f087250914caedd3aaa93982af1c433
SHA512

567f6c90c1d9da328afbe3d8c1fb452135e592e13daf59b78f6855c7caa00cc98d5a76ac5707583907f6391dd8d940bfe1b1c187c9448b635414307ae87abf4e
SSDEEP

6144:ZAU479KlI4imKWcPg62UgzMha1UBR+B3F:Wl96WmlcPg62tj10

Score

10^/10

locky defense_evasion discovery ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

aca7ca6f090aba613f6a701f0b2bac1c_JaffaCakes118.exe

Resource

win7-20241010-en

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

aca7ca6f090aba613f6a701f0b2bac1c_JaffaCakes118.exe

Resource

win10v2004-20241007-en

locky defense_evasion discovery ransomware

windows10-2004-x64

16 signatures

150 seconds

Malware Config

Targets

- Target
  
  aca7ca6f090aba613f6a701f0b2bac1c_JaffaCakes118
- Size
  
  202KB
- MD5
  
  aca7ca6f090aba613f6a701f0b2bac1c
- SHA1
  
  7d889d00e5cf9a09800faa450fcbfa17eadc5664
- SHA256
  
  749e8c87bc157a7dc7a9c7427c41dbcd1f087250914caedd3aaa93982af1c433
- SHA512
  
  567f6c90c1d9da328afbe3d8c1fb452135e592e13daf59b78f6855c7caa00cc98d5a76ac5707583907f6391dd8d940bfe1b1c187c9448b635414307ae87abf4e
- SSDEEP
  
  6144:ZAU479KlI4imKWcPg62UgzMha1UBR+B3F:Wl96WmlcPg62tj10
Score

10^/10

discovery locky defense_evasion ransomware
- Locky
  Ransomware strain released in 2016, with advanced features like anti-analysis.
  ransomware locky
- Locky family
  locky
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2

lockydefense_evasiondiscoveryransomware

© 2018-2024

Terms | Privacy