In my second text about Malware Studies, this time I’ll show the analysis made in Locky Ransomware. Like the previous post, this executable was obtained in theZoo. SHA1 sample: b606aaa402bfe4a15ef80165e964d384f25564e4 To know the timestamp of the executable, for more information about the version, a search with the hash was made…
![[Malware Studies] Locky](https://miro.medium.com/v2/resize:fill:224:224/1*MzsSRP--FbSS0-ZgEqXjwQ.png)
![[Malware Studies] Locky](https://miro.medium.com/v2/resize:fill:160:112/1*MzsSRP--FbSS0-ZgEqXjwQ.png)
![[Malware Studies] Cerber](https://miro.medium.com/v2/resize:fill:224:224/1*ba3lDHmMWyqUoC9QL_Uihg.png)
![[Malware Studies] Cerber](https://miro.medium.com/v2/resize:fill:160:112/1*ba3lDHmMWyqUoC9QL_Uihg.png)
![[Write-up] LetsDefend — Suspicious Mshta Behavior](https://miro.medium.com/v2/resize:fill:224:224/1*__wSbffTXjkPCzVknMQ_yg.png)
![[Write-up] LetsDefend — Suspicious Mshta Behavior](https://miro.medium.com/v2/resize:fill:160:112/1*__wSbffTXjkPCzVknMQ_yg.png)
