General
-
Target
2024-02-28_5d066d873d1736570f2d10c182dfebd2_lockbit
-
Size
148KB
-
MD5
5d066d873d1736570f2d10c182dfebd2
-
SHA1
0d1c278b83406c53dcc9db44630d2ef002a3b28a
-
SHA256
3a46534271954db3df6dcc13b13fc69c7f7cc95c0a6f59b46778299c4168c658
-
SHA512
cca191dd972416e52cecbf6c438533118871a3a58de1ba28a5c790207afec7e1eb9fcadc759cf0b311544803169bc63463c0a03b03dd2deb8eed06305767085d
-
SSDEEP
3072:ym0ROZIL87L1yoklfzGp3XjRaDyZbMqqD/A6lHlC:ypMCL8rpHjRaPqqD/RjC
Score
10/10
Malware Config
Signatures
-
Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
-
Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-02-28_5d066d873d1736570f2d10c182dfebd2_lockbit
168ea5b327edf5713a2bb8e19a928d13
Headers
Imports
Sections