General

  • Target
    jaffacakes118_Trojan-Ransom.Win32.Locky.adhu.dbacb9edc7b168e65b2e28f59218850b
  • Size 176KB
  • Sample261016-gd43dssw4r
  • SHA256 7acbf2edb7b7435e21cda70b6a0b7d3fdaed248b63d27208b3b1ca38a18c4a1d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      jaffacakes118_Trojan-Ransom.Win32.Locky.adhu.dbacb9edc7b168e65b2e28f59218850b
    • Size 176KB
    • SHA256 7acbf2edb7b7435e21cda70b6a0b7d3fdaed248b63d27208b3b1ca38a18c4a1d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Locky

      Ransomware strain released in 2016, with advanced features like anti-analysis.

    • Family: Locky (Osiris variant)

      Variant of the Locky ransomware seen in the wild since early 2017.

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v16

Tasks