lockbit | 3bbba6dd904ef7a167d62bbc0eb869c5d5de595c903f62b0565c579fbbd6579d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bbba6dd904ef7a167d62bbc0eb869c5d5de595c903f62b0565c579fbbd6579d
Size

142KB
MD5

8d110f8577a78a22c9fefdf1539df463
SHA1

67e6787249929e159894e459f15a125215dc0828
SHA256

3bbba6dd904ef7a167d62bbc0eb869c5d5de595c903f62b0565c579fbbd6579d
SHA512

29bc1b50e443f1f88a283b92421371acece06b2fdcea095834694867c3f4ac9e5c967237971ff1537507b3fd390a1101048c6ed3122e5dc46d931295ba8eab97
SSDEEP

3072:EixLzZlXRu85KiqKnTj/Hr5mn0XwD5dmDccEH8Vb4WcYVhZpdNL:EixLzj48IKnTbrU+rDc7H8Vx1VhNNL

Score

10^/10

lockbit

Malware Config

Signatures

Lockbit family
lockbit

Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs

resource	yara_rule
sample	family_lockbit

Files

3bbba6dd904ef7a167d62bbc0eb869c5d5de595c903f62b0565c579fbbd6579d
.exe windows x86

41fb8cb2943df6de998b35a9d28668e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetPixel
SetDCBrushColor
SelectPalette
GetTextColor
GetDeviceCaps
CreateSolidBrush

user32

DefWindowProcW
CreateMenu
EndDialog
GetDlgItem
GetKeyNameTextW
GetMessageW
GetWindowTextW
IsDlgButtonChecked
LoadImageW
LoadMenuW
DialogBoxParamW

kernel32

SetLastError
LoadLibraryW
GetTickCount
GetLastError
GetCommandLineW
GetCommandLineA
FreeLibrary

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE