Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
31-05-2024 07:39
General
-
Target
c7a734bc1dd8ecb996fc1b50f2133b3f281b16e2a25dbb445c3f065b88bf9590.exe
-
Size
352KB
-
MD5
ca18cbeb14b511e2a0ed10fd1d525941
-
SHA1
5ab566b16ffbc56feeb059541ad8145a3bc6dd63
-
SHA256
c7a734bc1dd8ecb996fc1b50f2133b3f281b16e2a25dbb445c3f065b88bf9590
-
SHA512
b2e71227d5c100815d56974ff2c861f898c161aeca14e78409902fef7e11832da742433bcfa19debbe2577f07abda2508a334144db1fc47e37281e87fae32c31
-
SSDEEP
6144:COAHKX0LfgPQ3/zCBJyymj/q7sO9Tjuacclkm10URHAeC8e3ciX87vW4kF:CZ5gPw/6kX/0N6acIbxZze3cr7u9F
Score
10/10
Malware Config
Signatures
-
Lockbit
Ransomware family with multiple variants released since late 2019.
-
Rule to detect Lockbit 3.0 ransomware Windows payload 5 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c7a734bc1dd8ecb996fc1b50f2133b3f281b16e2a25dbb445c3f065b88bf9590.exe"C:\Users\Admin\AppData\Local\Temp\c7a734bc1dd8ecb996fc1b50f2133b3f281b16e2a25dbb445c3f065b88bf9590.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1320 -s 4282⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1320 -ip 13201⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
4KB
-
Filesize
272KB
-
Filesize
96KB
-
Filesize
236KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
236KB