Locky Strike: Smoking the Locky Ransomware Code
Show in Graph
Image Description
Common Information
Type Value
UUID d9984721-c962-492f-bf6a-72e9bb9006c3
Fingerprint b0add8239f3563380579f62d51ee56923dda79a527102d23d853e0f0acfffb75
Analysis status DONE
Considered CTI value 0
Text language
Published None
Added to db April 16, 2024, 7:47 p.m.
Last updated Aug. 31, 2024, 12:12 a.m.
Headline Locky Strike: Smoking the Locky Ransomware Code
Title Locky Strike: Smoking the Locky Ransomware Code
Detected Hints/Tags/Attributes 59/2/13
Source URLs
Redirection Url
Details Source https://www.virusbulletin.com/uploads/pdf/conference_slides/2016/DelaPaz_Joven_Bacurio-vb-2016-locky-strike.pdf
URL Provider
Details Provider Source level domain
Details virusbulletin.com www.virusbulletin.com
Attributes
Details Type #Events CTI Value
Details Domain 30 
fortinet.com
Details Email 1 
fbacurio@fortinet.com
Details Email 1 
rjoven@fortinet.com
Details File 1122 
svchost.exe
Details File 53 
main.php
Details File 44 
submit.php
Details File 8 
userinfo.php
Details File 3 
_dispatch.php
Details File 97 
upload.php
Details File 49 
info.php
Details File 2 
apache_handler.php
Details File 96 
wallet.dat
Details md5 1 
4DF383039AB03953D81660EB4CADC28D