Overview
overview
10Static
static
90f178bc093...35.exe
windows7_x64
100f178bc093...35.exe
windows10_x64
101b109db549...18.exe
windows7_x64
101b109db549...18.exe
windows10_x64
101dbe9f9565...92.exe
windows7_x64
101dbe9f9565...92.exe
windows10_x64
101e3bf358c7...70.exe
windows7_x64
101e3bf358c7...70.exe
windows10_x64
1026b6a9fecf...39.exe
windows7_x64
1026b6a9fecf...39.exe
windows10_x64
10286bffaa9c...3f.exe
windows7_x64
10286bffaa9c...3f.exe
windows10_x64
10410c884d88...77.exe
windows7_x64
10410c884d88...77.exe
windows10_x64
105072678821...db.exe
windows7_x64
105072678821...db.exe
windows10_x64
1069d9dd7fdd...97.exe
windows7_x64
1069d9dd7fdd...97.exe
windows10_x64
1076a77def28...78.exe
windows7_x64
1076a77def28...78.exe
windows10_x64
1091d1ab6c30...31.exe
windows7_x64
1091d1ab6c30...31.exe
windows10_x64
10ca57455fd1...75.exe
windows7_x64
10ca57455fd1...75.exe
windows10_x64
10e3f236e4ae...77.exe
windows7_x64
10e3f236e4ae...77.exe
windows10_x64
10faa3453ceb...69.exe
windows7_x64
10faa3453ceb...69.exe
windows10_x64
10ffbb6c4d8d...4d.exe
windows7_x64
10ffbb6c4d8d...4d.exe
windows10_x64
10Behavioral task
behavioral1
Sample
0f178bc093b6b9d25924a85d9a7dde64592215599733e83e3bbc6df219564335.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
0f178bc093b6b9d25924a85d9a7dde64592215599733e83e3bbc6df219564335.exe
Resource
win10v20210408
Behavioral task
behavioral3
Sample
1b109db549dd0bf64cadafec575b5895690760c7180a4edbf0c5296766162f18.exe
Resource
win7v20210408
Behavioral task
behavioral4
Sample
1b109db549dd0bf64cadafec575b5895690760c7180a4edbf0c5296766162f18.exe
Resource
win10v20210410
Behavioral task
behavioral5
Sample
1dbe9f956514460774290197ffccb11d817d1a5a5aeab81877ae7b74daa1b592.exe
Resource
win7v20210410
Behavioral task
behavioral6
Sample
1dbe9f956514460774290197ffccb11d817d1a5a5aeab81877ae7b74daa1b592.exe
Resource
win10v20210410
Behavioral task
behavioral7
Sample
1e3bf358c76f4030ffc4437d5fcd80c54bd91b361abb43a4fa6340e62d986770.exe
Resource
win7v20210408
Behavioral task
behavioral8
Sample
1e3bf358c76f4030ffc4437d5fcd80c54bd91b361abb43a4fa6340e62d986770.exe
Resource
win10v20210410
Behavioral task
behavioral9
Sample
26b6a9fecfc9d4b4b2c2ff02885b257721687e6b820f72cf2e66c1cae2675739.exe
Resource
win7v20210410
Behavioral task
behavioral10
Sample
26b6a9fecfc9d4b4b2c2ff02885b257721687e6b820f72cf2e66c1cae2675739.exe
Resource
win10v20210408
Behavioral task
behavioral11
Sample
286bffaa9c81abfb938fe65be198770c38115cdec95865a241f913769e9bfd3f.exe
Resource
win7v20210410
Behavioral task
behavioral12
Sample
286bffaa9c81abfb938fe65be198770c38115cdec95865a241f913769e9bfd3f.exe
Resource
win10v20210408
Behavioral task
behavioral13
Sample
410c884d883ebe2172507b5eadd10bc8a2ae2564ba0d33b1e84e5f3c22bd3677.exe
Resource
win7v20210408
Behavioral task
behavioral14
Sample
410c884d883ebe2172507b5eadd10bc8a2ae2564ba0d33b1e84e5f3c22bd3677.exe
Resource
win10v20210408
Behavioral task
behavioral15
Sample
5072678821b490853eff0a97191f262c4e8404984dd8d5be1151fef437ca26db.exe
Resource
win7v20210408
Behavioral task
behavioral16
Sample
5072678821b490853eff0a97191f262c4e8404984dd8d5be1151fef437ca26db.exe
Resource
win10v20210408
Behavioral task
behavioral17
Sample
69d9dd7fdd88f33e2343fb391ba063a65fe5ffbe649da1c5083ec4a67c525997.exe
Resource
win7v20210408
Behavioral task
behavioral18
Sample
69d9dd7fdd88f33e2343fb391ba063a65fe5ffbe649da1c5083ec4a67c525997.exe
Resource
win10v20210410
Behavioral task
behavioral19
Sample
76a77def28acf51b2b7cdcbfaa182fe5726dd3f9e891682a4efc3226640b9c78.exe
Resource
win7v20210410
Behavioral task
behavioral20
Sample
76a77def28acf51b2b7cdcbfaa182fe5726dd3f9e891682a4efc3226640b9c78.exe
Resource
win10v20210408
Behavioral task
behavioral21
Sample
91d1ab6c305552685996f4d80c44cc1c694355ae7d09243df027827d1df61631.exe
Resource
win7v20210410
Behavioral task
behavioral22
Sample
91d1ab6c305552685996f4d80c44cc1c694355ae7d09243df027827d1df61631.exe
Resource
win10v20210410
Behavioral task
behavioral23
Sample
ca57455fd148754bf443a2c8b06dc2a295f014b071e3990dd99916250d21bc75.exe
Resource
win7v20210410
Behavioral task
behavioral24
Sample
ca57455fd148754bf443a2c8b06dc2a295f014b071e3990dd99916250d21bc75.exe
Resource
win10v20210408
Behavioral task
behavioral25
Sample
e3f236e4aeb73f8f8f0caebe46f53abbb2f71fa4b266a34ab50e01933709e877.exe
Resource
win7v20210410
Behavioral task
behavioral26
Sample
e3f236e4aeb73f8f8f0caebe46f53abbb2f71fa4b266a34ab50e01933709e877.exe
Resource
win10v20210410
Behavioral task
behavioral27
Sample
faa3453ceb1bd4e5b0b10171eaa908e56e7275173178010fcc323fdea67a6869.exe
Resource
win7v20210410
Behavioral task
behavioral28
Sample
faa3453ceb1bd4e5b0b10171eaa908e56e7275173178010fcc323fdea67a6869.exe
Resource
win10v20210410
Behavioral task
behavioral29
Sample
ffbb6c4d8d704a530bdd557890f367ad904c09c03f53fda5615a7208a0ea3e4d.exe
Resource
win7v20210410
Behavioral task
behavioral30
Sample
ffbb6c4d8d704a530bdd557890f367ad904c09c03f53fda5615a7208a0ea3e4d.exe
Resource
win10v20210410
General
-
Target
lockbit-cases.zip
-
Size
2.5MB
-
MD5
de6c6b3143f6d911c84e3a328854d98f
-
SHA1
902d930733dd950bb376cf46511489b6c82401d6
-
SHA256
d63224f2076b5cdb010e31dd408b07218381fd21939f8bd3b4aa8f5c03f6a702
-
SHA512
e87239cb4e2b79152baded43758adcb0cf980e32b11455b9072ce4059f4a4bf67b926631e67789a97ecb8ef917c7bc5f51f3cd16b41488724c4531890ae58a2a
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/1dbe9f956514460774290197ffccb11d817d1a5a5aeab81877ae7b74daa1b592 cryptone -
Processes:
resource yara_rule static1/unpack001/1e3bf358c76f4030ffc4437d5fcd80c54bd91b361abb43a4fa6340e62d986770 upx static1/unpack001/76a77def28acf51b2b7cdcbfaa182fe5726dd3f9e891682a4efc3226640b9c78 upx
Files
-
lockbit-cases.zip.zip
Password: infected
-
0f178bc093b6b9d25924a85d9a7dde64592215599733e83e3bbc6df219564335.exe windows x86
-
1b109db549dd0bf64cadafec575b5895690760c7180a4edbf0c5296766162f18.exe windows x86
-
1dbe9f956514460774290197ffccb11d817d1a5a5aeab81877ae7b74daa1b592.exe windows x86
-
1e3bf358c76f4030ffc4437d5fcd80c54bd91b361abb43a4fa6340e62d986770.exe windows x86
-
26b6a9fecfc9d4b4b2c2ff02885b257721687e6b820f72cf2e66c1cae2675739.exe windows x86
-
286bffaa9c81abfb938fe65be198770c38115cdec95865a241f913769e9bfd3f.exe windows x86
-
410c884d883ebe2172507b5eadd10bc8a2ae2564ba0d33b1e84e5f3c22bd3677.exe windows x86
-
5072678821b490853eff0a97191f262c4e8404984dd8d5be1151fef437ca26db.exe windows x86
-
69d9dd7fdd88f33e2343fb391ba063a65fe5ffbe649da1c5083ec4a67c525997.exe windows x86
-
76a77def28acf51b2b7cdcbfaa182fe5726dd3f9e891682a4efc3226640b9c78.exe windows x86
-
91d1ab6c305552685996f4d80c44cc1c694355ae7d09243df027827d1df61631.exe windows x86
-
ca57455fd148754bf443a2c8b06dc2a295f014b071e3990dd99916250d21bc75.exe windows x86
-
e3f236e4aeb73f8f8f0caebe46f53abbb2f71fa4b266a34ab50e01933709e877.exe windows x86
-
faa3453ceb1bd4e5b0b10171eaa908e56e7275173178010fcc323fdea67a6869.exe windows x86
-
ffbb6c4d8d704a530bdd557890f367ad904c09c03f53fda5615a7208a0ea3e4d.exe windows x86