General

  • Target

    2e8aaa6338cbf95d8d268559fb8afac64e1c0dfc9ded4bb2de63a9db634e354d.exe

  • Size

    107KB

  • MD5

    4c7aec0961992317bed8adb8be509d5e

  • SHA1

    b3c56b467007ab49d86b09597d05603e367d26af

  • SHA256

    bb56ff7ba7d1007b90ef67f29aed8f03af72e23ddd93782346ae63dd4a941b6d

  • SHA512

    19fa92ac8ff661b4f657bff7d5a7456d1e4d1cffe63c53b7eea0b14d1ef7a15b8ab819cd40b91c123c6a9f78341cf2e963652b9a4e96baa18f12a9462429a9b6

  • SSDEEP

    3072:232God/P/E5puuY8E8SL2UN9vVdlmy/G8pO:232j/E59Y8XjUN9dbmy/G8Q

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e8aaa6338cbf95d8d268559fb8afac64e1c0dfc9ded4bb2de63a9db634e354d.exe
    .zip

    Password: YOIN=Tp689~u%u7n6|)x

  • Device/HarddiskVolume2/Users/jeanluc/Downloads/2e8aaa6338cbf95d8d268559fb8afac64e1c0dfc9ded4bb2de63a9db634e354d/2e8aaa6338cbf95d8d268559fb8afac64e1c0dfc9ded4bb2de63a9db634e354d.exe
    .exe windows:5 windows x86

    Password: YOIN=Tp689~u%u7n6|)x

    89b43582b27abefb2b74684ab12a2f8e


    Headers

    Imports

    Sections

  • manifest.json