Without Necurs, Locky Struggles
Tags
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Dns - T1071.004 Dns - T1590.002 Domains - T1583.001 Domains - T1584.001 Ip Addresses - T1590.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Scripting - T1064 Scripting
Show in Graph
Common Information
Type Value
UUID 9112e6fa-320d-4587-839b-b0d31466671b
Fingerprint a036195f2ba8dc49
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 18, 2017, 6:01 p.m.
Added to db Feb. 18, 2023, 2:04 a.m.
Last updated Sept. 1, 2024, 11:23 p.m.
Headline Cisco Talos Intelligence Blog
Title Without Necurs, Locky Struggles
Detected Hints/Tags/Attributes 42/1/13
Source URLs
Redirection Url
Details Source http://blog.talosintel.com/2017/01/locky-struggles.html
Details Redirection http://blog.talosintelligence.com/2017/01/locky-struggles.html
Details Redirection https://blog.talosintelligence.com/locky-struggles
Details Source https://blog.talosintelligence.com/locky-struggles/
URL Provider
Details Provider Source level domain
Details talosintel.com blog.talosintel.com
Details talosintelligence.com blog.talosintelligence.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
71344395.doc.zip
Details Domain 2 
bolayde.com
Details Domain 2 
tangopostale.com
Details Domain 2 
unwelcomeaz.top
Details File 1 
71344395.doc
Details File 1 
doc_details.js
Details sha256 2 
20667ee47576765550f9961b87728128c8d9cf88861096c9715c6fce994e347e
Details sha256 2 
3c476dfbe53259830c458cf8b323cc9aeeb3d63d5f88cc2976716beaf24bd07c
Details sha256 2 
2d51e764bf37e2e8c845d980a4d324e8a1406d04a791a57e6082682ce04517db
Details sha256 2 
79ffaa5453500f75abe4ad196100a53dfb5ec5297fc714dd10feb26c4fb086db
Details sha256 2 
0822a63725345e6b8921877367e43ee23696d75f712a9c54d5442dbc0d5f2056
Details sha256 2 
55d092af73e5631982da6c165dfa704854b92f74eef0846e4b1aad57d0215251
Details sha256 2 
ec9c06a7cf810b07c342033588d2e7f5741e7acbea5f0c8e7009f6cc7087e1f7