Analysis
-
max time kernel
88s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
27-01-2024 16:14
General
-
Target
LockBit-Black-Builder-main/LockBit3Builder/Build/LB3_Rundll32_pass.dll
-
Size
148KB
-
MD5
93046eb83f029ea9dc24522e88cfe75e
-
SHA1
fe73ccfbb8c3a124a884f19b5149224265ca59e9
-
SHA256
b530be92d5785dbf1446d898c04702b33c58b985a2a29f6131688badf6b6ee56
-
SHA512
666be29c79db61eaf6d291de9e3cf6a47438d961ede6b56edc6ff98ca6256341e39a9ca9f177244dc4e83e6c43599b0395c81647ce60c874d1b057994cef41f8
-
SSDEEP
3072:+R/3wDb7wo0h86nHjVzmGzzAAIGMaoz8o077WLm+BzuSeqIHGJLO:y3cwXhBDVzmYMAIdP0/kbzu9qImJy
Score
10/10
Malware Config
Signatures
-
Lockbit
Ransomware family with multiple variants released since late 2019.
-
Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LockBit-Black-Builder-main\LockBit3Builder\Build\LB3_Rundll32_pass.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\LockBit-Black-Builder-main\LockBit3Builder\Build\LB3_Rundll32_pass.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
164KB