General
-
Target
2024-02-03_12d44f348079d0908ad7ab81d18f3d88_lockbit
-
Size
357KB
-
MD5
12d44f348079d0908ad7ab81d18f3d88
-
SHA1
55f110f524a4550442847dfb79aaa593236c061e
-
SHA256
06cd0b8dbfe90f15b5e2910576d98d970836c90b7d5acde23a82ebdbd10067f8
-
SHA512
7a040e095ef24c90016bdce49435f3f81576842bf890b4ec910f6e7568b1a1a92819c531c7412f65851c26be80633125c3ae2aeea540148887675319a9cf2fc8
-
SSDEEP
6144:MGpV1z8QUrkR10efU/TGpGGpV1z8Qcy1PSbOqslVC7nJUkhIeMIcC16V:hpVaxQztf9pPpVaxy0bOM7np+e31
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables built or packed with MPress PE compressor 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-02-03_12d44f348079d0908ad7ab81d18f3d88_lockbit
f5e4c8acb92fb1c8223cff431020dba0
Headers
Imports
Sections