locky | d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c | Triage

Submit
Reports

Overview

overview

Static

static

3

d3d734a52f...0c.exe

windows7-x64

3

d3d734a52f...0c.exe

windows10-2004-x64

Sharing

General

Target

d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c.exe
Size

4.0MB
Sample

250208-dj7hxs1pf1
MD5

a2ff8c996cf54224259829654176a406
SHA1

ee665eab5efe95f5a9668a8e0d986a19663c53c3
SHA256

d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c
SHA512

3189775adc6eb24a459d12c8ca54bacbcb45a4931ff1c92c11efa28db82f614d08c0eba35f365dad84b8acefcc0f2b6e6c9a360eb7bb327090b28766ff06895a
SSDEEP

98304:J8NPKZC3KHXThoNyx8bOpgSrU4d5SOAy1pHbMuJO:JoPKZC3KHXThoNyx8bOpgSTfX1dFJO

Score

10^/10

locky locky_osiris defense_evasion discovery ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c.exe

Resource

win7-20241010-en

windows7-x64

1 signatures

120 seconds

Behavioral task

behavioral2

Sample

d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c.exe

Resource

win10v2004-20250207-en

locky locky_osiris defense_evasion discovery ransomware

windows10-2004-x64

18 signatures

120 seconds

Malware Config

Targets

- Target
  
  d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c.exe
- Size
  
  4.0MB
- MD5
  
  a2ff8c996cf54224259829654176a406
- SHA1
  
  ee665eab5efe95f5a9668a8e0d986a19663c53c3
- SHA256
  
  d3d734a52f181dd68bf16aa071e06cf02ee89dee4225c938f86e3aceb33c9c0c
- SHA512
  
  3189775adc6eb24a459d12c8ca54bacbcb45a4931ff1c92c11efa28db82f614d08c0eba35f365dad84b8acefcc0f2b6e6c9a360eb7bb327090b28766ff06895a
- SSDEEP
  
  98304:J8NPKZC3KHXThoNyx8bOpgSrU4d5SOAy1pHbMuJO:JoPKZC3KHXThoNyx8bOpgSTfX1dFJO
Score

10^/10

discovery locky locky_osiris defense_evasion ransomware
- Locky
  Ransomware strain released in 2016, with advanced features like anti-analysis.
  ransomware locky
- Locky (Osiris variant)
  Variant of the Locky ransomware seen in the wild since early 2017.
  ransomware locky_osiris
- Locky family
  locky
- Locky_osiris family
  locky_osiris
- Downloads MZ/PE file
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Sets desktop wallpaper using registry
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

Tasks

static1

behavioral1

behavioral2

lockylocky_osirisdefense_evasiondiscoveryransomware

© 2018-2025

Terms | Privacy