General

  • Target

    https://cdn.discordapp.com/attachments/1340105328909619340/1343004836731555891/fnafmovie.exe?ex=67bbb238&is=67ba60b8&hm=51ed896606ffd7d27280e13db38097e4a0ca16f40a602eaf7ff0dc6c6e162218&

  • Sample

    250222-3q3wrasmcr

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1340105328909619340/1343004836731555891/fnafmovie.exe?ex=67bbb238&is=67ba60b8&hm=51ed896606ffd7d27280e13db38097e4a0ca16f40a602eaf7ff0dc6c6e162218&

    • Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

    • Locky family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks