General
- Target jaffacakes118_Trojan-Ransom.Win32.Locky.adhu.dbacb9edc7b168e65b2e28f59218850b
- Size 176KB
- Sample261016-gd43dssw4r
- SHA256 7acbf2edb7b7435e21cda70b6a0b7d3fdaed248b63d27208b3b1ca38a18c4a1d
- MD5 dbacb9edc7b168e65b2e28f59218850b
- SHA1 2f679789a418153bd760ab8e62b720aed01931d2
- SHA512 cc935fc2ad557ef37f578fbdc50f5daf3e7c556693f972e9a43f44a50b7c11df54f49f94c6b3e0fdca40babb8cc892dcdd8344a846c5edefb2ecf20dfc082653
- SSDEEP 3072:rsBKWvNy+3HbSkPqsEMO49bvfjmOXiX97PIRXRLZd5UfJplQEGpjPU0+jm7ExcK:ABKwyoxqsM49vmOwQ/LfmaZpj80RQxcK
- TLSH T17604E010E1476C80EAB284FE77DD5ADD46E4B2F8135824A77018A5ED2DB24F899B09F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_Trojan-Ransom.Win32.Locky.adhu.dll
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
jaffacakes118_Trojan-Ransom.Win32.Locky.adhu.dll
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_Trojan-Ransom.Win32.Locky.adhu.dbacb9edc7b168e65b2e28f59218850b
- Size 176KB
- SHA256 7acbf2edb7b7435e21cda70b6a0b7d3fdaed248b63d27208b3b1ca38a18c4a1d
- MD5 dbacb9edc7b168e65b2e28f59218850b
- SHA1 2f679789a418153bd760ab8e62b720aed01931d2
- SHA512 cc935fc2ad557ef37f578fbdc50f5daf3e7c556693f972e9a43f44a50b7c11df54f49f94c6b3e0fdca40babb8cc892dcdd8344a846c5edefb2ecf20dfc082653
- SSDEEP 3072:rsBKWvNy+3HbSkPqsEMO49bvfjmOXiX97PIRXRLZd5UfJplQEGpjPU0+jm7ExcK:ABKwyoxqsM49vmOwQ/LfmaZpj80RQxcK
- TLSH T17604E010E1476C80EAB284FE77DD5ADD46E4B2F8135824A77018A5ED2DB24F899B09F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Family: Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
Family: Locky (Osiris variant)
Variant of the Locky ransomware seen in the wild since early 2017.
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Sets desktop wallpaper using registry