General
- Target jaffacakes118_Trojan-Ransom.Win32.Locky.aewb.d6a42f5ad579460febca01773bb71122
- Size 610KB
- Sample261012-jzbdbagx7v
- SHA256 8da17ae48eda37f731fd28ba8aff489d8b340cd947a6a33492f63b5ba6978c16
- MD5 d6a42f5ad579460febca01773bb71122
- SHA1 376866587f01e95204fcde60a580c65d93c25ac0
- SHA512 d37b6b9bb738b7f2df64153a52279053caed33e3c4a1305dcf9641e7af5af4d24fc27b79a1b04c6ef96fd2e2e43735758bcbfdbfd36c3f91f60cc73db7e4099a
- SSDEEP 12288:GP1IIexawFUu3moT16f4XlW3nTfgMgbvaDzuywH8m3sMnYZoH9xHW:xxxaw+os4XA3LgvmzoXcMn+on
- TLSH T182D4DF9CD180E2B1E9B8047751A8AF3D09BEFD6183C61DAF23F143E16982BC7771A945
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Ransom.Win32.Locky.aewb.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Ransom.Win32.Locky.aewb.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Ransom.Win32.Locky.aewb.d6a42f5ad579460febca01773bb71122
- Size 610KB
- SHA256 8da17ae48eda37f731fd28ba8aff489d8b340cd947a6a33492f63b5ba6978c16
- MD5 d6a42f5ad579460febca01773bb71122
- SHA1 376866587f01e95204fcde60a580c65d93c25ac0
- SHA512 d37b6b9bb738b7f2df64153a52279053caed33e3c4a1305dcf9641e7af5af4d24fc27b79a1b04c6ef96fd2e2e43735758bcbfdbfd36c3f91f60cc73db7e4099a
- SSDEEP 12288:GP1IIexawFUu3moT16f4XlW3nTfgMgbvaDzuywH8m3sMnYZoH9xHW:xxxaw+os4XA3LgvmzoXcMn+on
- TLSH T182D4DF9CD180E2B1E9B8047751A8AF3D09BEFD6183C61DAF23F143E16982BC7771A945
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Locky (Lukitus variant)
Variant of the Locky ransomware seen in the wild since late 2017.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Sets desktop wallpaper using registry