General
- Target tmpk_1lnzhu.exe
- Size 164KB
- Sample260522-ndqckab14v
- SHA256 35db7ec6d9d3fe8b5e33ac9352befdd7abab2566c611f4b427b669194db1605a
- MD5 26fe695bf36614aacd4523cbe09014e3
- SHA1 209e2539c1a383ccf95f7ff21ac24b0ce1de9cf2
- SHA512 5890c8ead0fafa3921817eae1b6fcf82ec7859310e0199ee4cda6ce2e1c424fb82d22646d3bf3b7003fe90b6c80e1746212a40cda63b9b1ce077f44517d3f8ea
- SSDEEP 3072:AOV3k6wVvaEwCFjJdpWrjji/g7nZ1rB9vwWLaIWC1L+RB:AOu5vaE/VUjj7DZb9YWWIW
- TLSH T1B4F3CFAA69711587DCEB02B0E8B3A8F7505CEF32AF141D7703F9D6359790286E4829D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmpk_1lnzhu.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpk_1lnzhu.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target tmpk_1lnzhu.exe
- Size 164KB
- SHA256 35db7ec6d9d3fe8b5e33ac9352befdd7abab2566c611f4b427b669194db1605a
- MD5 26fe695bf36614aacd4523cbe09014e3
- SHA1 209e2539c1a383ccf95f7ff21ac24b0ce1de9cf2
- SHA512 5890c8ead0fafa3921817eae1b6fcf82ec7859310e0199ee4cda6ce2e1c424fb82d22646d3bf3b7003fe90b6c80e1746212a40cda63b9b1ce077f44517d3f8ea
- SSDEEP 3072:AOV3k6wVvaEwCFjJdpWrjji/g7nZ1rB9vwWLaIWC1L+RB:AOu5vaE/VUjj7DZb9YWWIW
- TLSH T1B4F3CFAA69711587DCEB02B0E8B3A8F7505CEF32AF141D7703F9D6359790286E4829D3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Checks for any installed AV software in registry