General

  • Target

    LBB - DO NOT RUN.zip.zip

  • Size

    95KB

  • MD5

    06c88d6bb7ff6ed07dfaf24a6e389b60

  • SHA1

    c33d3c5b926dbc24a34707b78845ca1d20daee05

  • SHA256

    c6b4ecf15f5cde3f09bc3b9c40360abc8016a6a1c623dbf378c33791c387449e

  • SHA512

    992b7202a26915a096333918e2c64f7d746d64dc002b33bd0a7d2615e245e07c95291dec3d73a9a96dc851409e32b149db99cde5e710b2a8445b3473e2cc9d28

  • SSDEEP

    1536:1YMEsKeNxj78j1ahmFpdSY2lrYdnkdUY3KHbqpN/jYZYVq54ayS4WxCR4TAIrk0/:SM7NxP8DdSPcdnk93KuDiYVq5+mQUAfy

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • LBB - DO NOT RUN.zip.zip
    .zip

    Password: infected

  • LBB - DO NOT RUN.zip
    .zip

    Password: infected

  • LBB.exe
    .exe windows:5 windows x86 arch:x86

    Password: infected

    3bc510de773c954bd69d33670cb624d6


    Headers

    Imports

    Sections