Overview

overview

10

Static

static

10

2024-02-23...it.exe

windows7-x64

10

2024-02-23...it.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-23_41297345be5edd4b0fc66e97e1083735_lockbit

  • Size

    54KB

  • MD5

    41297345be5edd4b0fc66e97e1083735

  • SHA1

    4aed3c2e1310e7c65633a16baf3c80b24289b6ba

  • SHA256

    ad32e6604f830841e4808be8335aa7517046fb630e9e57f9e219cd6bf11a97df

  • SHA512

    cd8c853d8ffec2cc9c42d1099cebcd41365aec3a88d21eb57528a83c84d9359c7f942755b0bf34c20a002be3e3b5145fef9ef6b365e51670a308746df64e8bad

  • SSDEEP

    1536:ZRJ4WLgxJTR6VuwM+oh1E3ncRZYQATnAf:Z/4WLgxxR6VzM11mnEQMf

Score
10/10

Malware Config

Signatures

  • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Detects executables packed with aPLib. 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_41297345be5edd4b0fc66e97e1083735_lockbit
    .exe windows:6 windows x86 arch:x86

    2e425f2675b17063ef08e8fa563efa65


    Headers

    Imports

    Sections