Behavioral task
behavioral1
Sample
2024-01-08_4ba691b85edf3926e1ce2dfb4aa882b7_cobalt-strike_lockbit.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-08_4ba691b85edf3926e1ce2dfb4aa882b7_cobalt-strike_lockbit.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-08_4ba691b85edf3926e1ce2dfb4aa882b7_cobalt-strike_lockbit
-
Size
336KB
-
MD5
4ba691b85edf3926e1ce2dfb4aa882b7
-
SHA1
8ca8140fa3fc52a202a868878c2b98b023831e01
-
SHA256
be2f34e16a50176394ccbf67b5fdf5d4d0d078187e842bb11d6d475865133ae9
-
SHA512
514eb5f4e32ba571a8b08c40ec4e37ba18a9af46051a0596bada56d3151754f9a6871d43bd1214c1a83c28f76e991645ee039363d824aca3ee5cb489167acfcc
-
SSDEEP
6144:YKXhrRJ5MXeQHt6isgI6QkUIcbpO5zxMu:dRrceQH48elc7n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-08_4ba691b85edf3926e1ce2dfb4aa882b7_cobalt-strike_lockbit
Files
-
2024-01-08_4ba691b85edf3926e1ce2dfb4aa882b7_cobalt-strike_lockbit.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE