lockbit | 4fe51b2fd9b481f74f5b56ecb2ab97b3268ba6d0 | Triage

Sharing

General

Target

4fe51b2fd9b481f74f5b56ecb2ab97b3268ba6d0
Size

142KB
MD5

290ee6b6f6b2a5f0899a6f35073f8eb4
SHA1

4fe51b2fd9b481f74f5b56ecb2ab97b3268ba6d0
SHA256

66f7a4ea923ecc8cdaa74b930cbd103b7170e06585c3f4dbfb7c113e05beaa02
SHA512

44099b230b8a9bf96282b97c3de9c7acb3cbeceb5d973219b27f84faea0d47ec7290ee93d8cab95342489e0ece89301aa37782cb37c608dbafc2c51765a4f713
SSDEEP

3072:0dFLWuuHITVFQpzfYP2IXNoj9VnPvJKCMq8DAGmMN0:6uHCFezQeIXNg9VPvJRK3mMN0

Score

10^/10

lockbit

Malware Config

Signatures

Lockbit family
lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs

resource	yara_rule
sample	family_lockbit

Files

4fe51b2fd9b481f74f5b56ecb2ab97b3268ba6d0
.exe windows x86

41fb8cb2943df6de998b35a9d28668e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
SetDCBrushColor
SelectPalette
GetTextColor
GetDeviceCaps
CreateSolidBrush

user32

DefWindowProcW
CreateMenu
EndDialog
GetDlgItem
GetKeyNameTextW
GetMessageW
GetWindowTextW
IsDlgButtonChecked
LoadImageW
LoadMenuW
DialogBoxParamW

kernel32

SetLastError
LoadLibraryW
GetTickCount
GetLastError
GetCommandLineW
GetCommandLineA
FreeLibrary

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE