General

  • Target

    df.exe

  • Size

    160KB

  • MD5

    fb5d76bb24a47e2c4dc15ed75bcd7e29

  • SHA1

    a9fdf934639db5a06645aeb204f4b17b2201a792

  • SHA256

    527f71e2ac55ee18f4376f213a242a20aa63f7ab501a23888b7d41ea8661802b

  • SHA512

    81ee0082836a4d864109b72c6dea94ba5dff83eebdc9cd631c9fc1de39fbc338617ecf277e01318e8affec95d143c0a1b5e31f8c0ed2e629e016fb27bda44d98

  • SSDEEP

    3072:e6glyuxE4GsUPnliByocWepQRM/igPn1Si1/icAbHtI:e6gDBGpvEByocWeORM/igPn3IH

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • df.exe
    .exe windows:5 windows x86

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections