Search
Keyword: JS_LOCKY.FS
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any
(a file extension used by Microsoft to link to an executable file) file attachment. In this case, the said executable is a variant of the Locky ransomware family. The ransomware has the capability to
An email with the subject 'Emailed Invoice - [random_number]' using a random name claiming to be from the recipients domain is spreading Locky ransomware. The spam campaign uses a new technique to
This Trojan arrives as an attachment to email messages spammed by other malware/grayware or malicious users. It arrives on a system as a file dropped by other malware or as a file downloaded
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.122.161 {BLOCKED}.20.46 {BLOCKED}.199.150 {BLOCKED}.28.30 {BLOCKED}.199.90 {BLOCKED}.216.143 This
This Trojan arrives as attachment to mass-mailed email messages. As of this writing, the said sites are inaccessible. This is the Trend Micro detection for files that contain a malicious script.
every system startup: HKEY_CURRENT_USER\SOFTWARE\Microsoft\ Windows\CurrentVersion\Run locky = {malware path} Other System Modifications This Ransomware adds the following registry entries:
HKEY_CURRENT_USER\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.233.106 {BLOCKED}47.37 {BLOCKED}.11.239 {BLOCKED}.172.143 This report is generated via an
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.29.188 {BLOCKED}83.195 {BLOCKED}.197.119 {BLOCKED}8.88.184 {BLOCKED}.19.227 This report is
HKEY_CURRENT_USER\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}47.37 {BLOCKED}138.187 {BLOCKED}8.88.184 This report is generated via an automated analysis
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.11.239 {BLOCKED}.67.27 {BLOCKED}.197.119 {BLOCKED}.233.106 {BLOCKED}.29.55 {BLOCKED}.28.198
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}4.157.14 {BLOCKED}1.16.196 {BLOCKED}.85.163 {BLOCKED}.53.18 {BLOCKED}.223.19 This report is
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}108.39 {BLOCKED}.12.187 {BLOCKED}.181.122 {BLOCKED}.154.114 {BLOCKED}2.109.205 This report is
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.39.18 {BLOCKED}1.16.196 {BLOCKED}.85.163 {BLOCKED}.223.19 {BLOCKED}.220.35 This report is generated
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.213.69 {BLOCKED}.220.35 {BLOCKED}.39.18 {BLOCKED}.223.19 This report is generated via an automated
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.107.10 {BLOCKED}7.231.116 {BLOCKED}108.39 {BLOCKED}.107.8 {BLOCKED}.27.52 {BLOCKED}.181.122
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.20.46 {BLOCKED}7.231.116 {BLOCKED}.154.114 {BLOCKED}108.39 This report is generated via an
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}1.16.196 {BLOCKED}6.14.51 {BLOCKED}.223.19 {BLOCKED}.85.163 {BLOCKED}.53.18 This report is generated
\Software\Locky Other Details This Trojan connects to the following possibly malicious URL: http://{BLOCKED}.223.19 {BLOCKED}1.16.196 {BLOCKED}6.14.51 {BLOCKED}.85.163 {BLOCKED}4.157.14 This report is