General

  • Target

    sophos-upload-347010691.zip

  • Size

    110KB

  • MD5

    2d9a64273aab077d93937e87080a2674

  • SHA1

    ecc5ede84580d8d97a9f4ec3ac1408a86ea9b1b4

  • SHA256

    69f6ac1f70959410258ee1513a7689391e8e9863323b58e08f8e6a4ae47b75c6

  • SHA512

    3b5ad23c549326cbb8c9c5a7e8b8123a4079b96a3807c92161ec5c1e1e816b62f42bc33ae7327bbad681d189e2f7e90da4bb081a5238c9f4943f6d45e0549de2

  • SSDEEP

    3072:Yu9cgQ9vnKM76SbU5WZuoAf81ffNluci/NXekXIJp:5MvYgIPfSNzi/NXekXIJp

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • sophos-upload-347010691.zip
    .zip

    Password: infected

  • www.exe
    .exe windows x86

    Password: infected

    89b43582b27abefb2b74684ab12a2f8e


    Headers

    Imports

    Sections