General

  • Target

    240224-2cs9qagf6v_pw_infected.zip

  • Size

    97KB

  • MD5

    ab14ad522014c4bd0b710d8fe4a5996b

  • SHA1

    35026a86be29161507dfddaa6e110420b2971295

  • SHA256

    e51155ce803bd9b96b91c822e41969c89e0c9e162aebc7643c23ed9489eb75b4

  • SHA512

    d6be06d567199dfef76b17503e9580776b1edf3c8340040e8fadd1a5b202ee84954fab58678e7a4581e4a9746e51f43842d5a7616018d343df601e5ca38b42c0

  • SSDEEP

    3072:GHz3VBGxh2CqEgIOH/boAWwKZE0ljVZ90+4Bgn3Q847:8Bc2CTsfJ0lTK+wgngV

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240224-2cs9qagf6v_pw_infected.zip
    .zip

    Password: infected

  • 2024-02-24_4fb4a10158fe5415e8e9468ec2d0dbbc_darkside
    .exe windows:5 windows x86 arch:x86

    914685b69f2ac2ff61b6b0f1883a054d


    Headers

    Imports

    Sections