General
-
Target
2024-02-03_445e8ccfc4137296695096c92bb09eaf_lockbit
-
Size
274KB
-
MD5
445e8ccfc4137296695096c92bb09eaf
-
SHA1
c652d0942c9f5688e2e5fe6a096b7f8ded2a02cc
-
SHA256
02eaa4dd28cd2ca7ca60112b9e8876980edc7b6dae396569684448c91bcb2157
-
SHA512
635d7bc0f4dd25519b0e5bd015ce7ba5b8abb99da82e9c6a0b3309386fef85f2708d9ad0f33f48bbad81d0d60b42479a395e2b172558d0c9006deffdbbe2eb66
-
SSDEEP
6144:fGpV1z8QOGpGGpV1z8Qcy1PSbOqslVC7nJUkhIeMIcC16V:+pVaWpPpVaxy0bOM7np+e31
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables built or packed with MPress PE compressor 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-02-03_445e8ccfc4137296695096c92bb09eaf_lockbit
f5e4c8acb92fb1c8223cff431020dba0
Headers
Imports
Sections