Resubmissions

14-03-2024 19:55

240314-ynfwzsfg23 10

General

  • Target

    lockbit_unpacked.exe

  • Size

    162KB

  • MD5

    a2bc2785420b0c6f685d8692d813fbbc

  • SHA1

    b118551289c9398a339cd1161b2c101571d4b5fd

  • SHA256

    1f9944ccc4cb956c4eb81e76d51b3cb048b838f2f746e2017d4492abd5e9ed79

  • SHA512

    32deb1d43a25b1b184f5ac212099d3004277d609d2784297c96632abe181e8c95f62185ea23ecefe640153c454bbcb33ef879d6c2d543f186160c9765e8bf0f8

  • SSDEEP

    3072:W5uyulsHwDV1gFnTwn7zwJGJ+at5kCI5Gzei3N2VzRmK:W5uZ1DPgFnk7EJwJI5gDN2VVm

Score
10/10

Malware Config

Signatures

  • BlackMatter API Hashing IAT pattern was detected 1 IoCs

    This rule detects samples from the BlackMatter family unpacked in memory, identifying code reuse of key functions.

  • Blackmatter family
  • Lockbit family
  • Lockbit3.0 API Hashing IAT pattern was detected 1 IoCs

    This rule detects samples from the Lockbit3.0 family unpacked in memory, identifying code reuse of key functions.

  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lockbit_unpacked.exe
    .exe windows:5 windows x86 arch:x86

    a50a0d82b9120fc73965c28fea79e1f9


    Headers

    Imports

    Sections