Resubmissions

23-05-2024 09:35

240523-lkmh5scb37 10

28-04-2024 14:29

240428-rth5zahg49 10

Analysis

  • max time kernel
    134s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 09:35

General

  • Target

    LockBit-Black-Builder-main/LockBit-Black-Builder-main/LockBit30/Build/LB3Decryptor.exe

  • Size

    54KB

  • MD5

    d1c15784587717fe03448d0c4dc8dd5b

  • SHA1

    f36ac101949a4fa8f604d561957fb9d3e1f73699

  • SHA256

    4973313c1c003a27190fba0a43dda1be78891552c9fabaa0c65e0051965ceee7

  • SHA512

    ef81b11962fb56a583c43ecdf0f8c66ef17850e85e56794b6c4ca328751609e4fe1fb1494e0e7315ff396510c467e440b74b62c105ce226f2fda49379d551a81

  • SSDEEP

    768:llD2N5KCJD5rkdDRib1Xf0854bhC3E9zpKMMYj1MYgFMRx:nAkCJD5rKDRib1F54NLp2Yj1M7MD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\LockBit-Black-Builder-main\LockBit-Black-Builder-main\LockBit30\Build\LB3Decryptor.exe
    "C:\Users\Admin\AppData\Local\Temp\LockBit-Black-Builder-main\LockBit-Black-Builder-main\LockBit30\Build\LB3Decryptor.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads