General

  • Target
    2025-11-14_e5e899ba4a84df92dd7856b41fa956d3_elex_wastedlocker
  • Size 56KB
  • Sample251114-ynqq7askbp
  • SHA256 9fd59efa518e4ab927b62fbd007abe43501c1ef8a6d8d143a0d667f34cd4f953
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2025-11-14_e5e899ba4a84df92dd7856b41fa956d3_elex_wastedlocker
    • Size 56KB
    • SHA256 9fd59efa518e4ab927b62fbd007abe43501c1ef8a6d8d143a0d667f34cd4f953
    • MD5 SHA1 SHA512 SSDEEP
    • WastedLocker

      Ransomware family seen in the wild since May 2020.

    • Wastedlocker family

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Renames multiple (128) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Possible privilege escalation attempt

    • Executes dropped EXE

    • Modifies file permissions

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks