General
- Target tmpwgwxfyyv.exe
- Size 180KB
- Sample260520-dcqltsh19m
- SHA256 b0cda4a0b2afbedc700d71a6bceace8b2a924ed114bd2a439a75439e427b1adf
- MD5 74a9930bc7f9065c803a539b8f8039a5
- SHA1 b52d0d4cbca3ff69161c1ba0f5a43e061c2a20ad
- SHA512 236c787ee9ed1d552c6be9af169a8066290b3b5871b0f10927a87438a6b6050bced72b46e250badeb236f0a1259596595e33b340214dd48e747071105e26b83c
- SSDEEP 3072:z7ab9UMLFD040mQ1+gGfK/kMQweuwYqHyuTGdp0Zug4WqGk:MGkDGmQQdINTVrOug4Wq
- TLSH T1D904D08A74AA3463C0E70970695271EF60DC9E33263B5F573D887A8E1355252FB182FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmpwgwxfyyv.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpwgwxfyyv.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target tmpwgwxfyyv.exe
- Size 180KB
- SHA256 b0cda4a0b2afbedc700d71a6bceace8b2a924ed114bd2a439a75439e427b1adf
- MD5 74a9930bc7f9065c803a539b8f8039a5
- SHA1 b52d0d4cbca3ff69161c1ba0f5a43e061c2a20ad
- SHA512 236c787ee9ed1d552c6be9af169a8066290b3b5871b0f10927a87438a6b6050bced72b46e250badeb236f0a1259596595e33b340214dd48e747071105e26b83c
- SSDEEP 3072:z7ab9UMLFD040mQ1+gGfK/kMQweuwYqHyuTGdp0Zug4WqGk:MGkDGmQQdINTVrOug4Wq
- TLSH T1D904D08A74AA3463C0E70970695271EF60DC9E33263B5F573D887A8E1355252FB182FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Checks for any installed AV software in registry