General
- Target Ransomware.Locky.zip
- Size 125KB
- Sample261107-eflbysaw2j
- SHA256 0537fa38b88755f39df1cd774b907ec759dacab2388dc0109f4db9f0e9d191a0
- MD5 b265305541dce2a140da7802442fbac4
- SHA1 63d0b780954a2bc96b3a77d9a2b3369d865bf1fd
- SHA512 af65384f814633fe1cde8bf4a3a1a8f083c7f5f0b7f105d47f3324cd2a8c9184ccf13cb3e43b47473d52f39f4151e7a9da1e9a16868da50abb74fcbc47724282
- SSDEEP 1536:6mXbzYYlSESr+LdgbfzNTBstcc6yVeHuwuY5pzl5Lypx0DIY6KQOoTFKmN9YMKW8:dbSr+Jg7lB2cV1aQ+WQVTFX9YPGQi1Mf
- TLSH T1BDC3126D0CE321DF4F7909D61AAC07F63D6E994096CB3E3E420BCF06C814A6629F8617
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Locky.exe
Resource
win10v2004-20260911-es
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Locky.exe
Resource
win11ltsc2024-20260911-es
4 signatures
150 seconds
Malware Config
Targets
-
- Target Locky
- Size 180KB
- SHA256 bc98c8b22461a2c2631b2feec399208fdc4ecd1cd2229066c2f385caa958daa3
- MD5 b06d9dd17c69ed2ae75d9e40b2631b42
- SHA1 b606aaa402bfe4a15ef80165e964d384f25564e4
- SHA512 8e54aca4feb51611142c1f2bf303200113604013c2603eea22d72d00297cb1cb40a2ef11f5129989cd14f90e495db79bffd15bd6282ff564c4af7975b1610c1c
- SSDEEP 3072:gzWgfLlUc7CIJ1tkZaQyjhOosc8MKi6KDXnLCtyAR0u1cZ86:gdLl4wkZa/UDiD7ukst1H6
- TLSH T19404D0BB715D8806FF75947640CC2A23DDE3E8B091ADDE23A68346E78C852DC58C9727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Locky
Ransomware strain released in 2016, with advanced features like anti-analysis.
Checks for any installed AV software in registry