General
- Target jhdgc63
- Size 576KB
- Sample260605-pghmkaez51
- SHA256 8a58444a95e38acdb229aa1fcbfe207e685d1fb095b4915b7e85ea37a940bab0
Score
10/10
Malware Config
Targets
-
- Target jhdgc63
- Size 576KB
- SHA256 8a58444a95e38acdb229aa1fcbfe207e685d1fb095b4915b7e85ea37a940bab0
Score10/10-
Family: Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
-
Deletes shadow copies
Ransomware often targets backup files to inhibit system recovery.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Defense Evasion
Direct Volume Access
1Indicator Removal
3File Deletion
3Modify Registry
1