General
-
Target
2024-02-20_fdbe7c3713224980960af3ffe23a070f_lockbit
-
Size
959KB
-
MD5
fdbe7c3713224980960af3ffe23a070f
-
SHA1
b8476f41ffe13dad3b1c839b307af92a4f52c614
-
SHA256
77a41f2ea91e559f5f1b0a24e0eedf28c4c74a1983641cff434be417f7ac20f7
-
SHA512
bfb7deaa2823a86281d7b8dc6539e746f121ed0deed5c2b50c13683512f20d16b4ace54e7a2c553c0c4b168a94a77107c07742f3642929f6a90030d0f88ad929
-
SSDEEP
24576:uLjr3s2nScu1i1tz3f++5kRzFxk7rMxNeR1R9qpdsF:Ujrc2So1Ff+B3k796K
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-02-20_fdbe7c3713224980960af3ffe23a070f_lockbit
216df81b1ef7bc2aa8ec52bbeef137c9
Headers
Imports
Sections