General

  • Target
    jaffacakes118_Trojan-Ransom.Win32.Locky.aewb.d6a42f5ad579460febca01773bb71122
  • Size 610KB
  • Sample261012-jzbdbagx7v
  • SHA256 8da17ae48eda37f731fd28ba8aff489d8b340cd947a6a33492f63b5ba6978c16
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Ransom.Win32.Locky.aewb.d6a42f5ad579460febca01773bb71122
    • Size 610KB
    • SHA256 8da17ae48eda37f731fd28ba8aff489d8b340cd947a6a33492f63b5ba6978c16
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Locky (Lukitus variant)

      Variant of the Locky ransomware seen in the wild since late 2017.

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v16

Tasks