General

  • Target
    2025-11-17_2b657ce27d9f5c9ffb5990c9705f8ade_elex_wastedlocker
  • Size 58KB
  • Sample251117-fr3aaadm71
  • SHA256 770201070ed3e19271b310c8bbd44617ff24e51fdb771c30f9adba3f0d7b36b3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2025-11-17_2b657ce27d9f5c9ffb5990c9705f8ade_elex_wastedlocker
    • Size 58KB
    • SHA256 770201070ed3e19271b310c8bbd44617ff24e51fdb771c30f9adba3f0d7b36b3
    • MD5 SHA1 SHA512 SSDEEP
    • WastedLocker

      Ransomware family seen in the wild since May 2020.

    • Wastedlocker family

    • Deletes shadow copies

      Ransomware often targets backup files to inhibit system recovery.

    • Renames multiple (125) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

    • Possible privilege escalation attempt

    • Executes dropped EXE

    • Modifies file permissions

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks