Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
31-05-2024 09:32
General
-
Target
af71567efa834a7a6008885bf25c5444d9bf7e8616725ace13e1443c82ede98f.exe
-
Size
364KB
-
MD5
c222fd2acfaec467e93a0e4b2653f78e
-
SHA1
04545ec2ad85efe58855423b790012e0014fd790
-
SHA256
af71567efa834a7a6008885bf25c5444d9bf7e8616725ace13e1443c82ede98f
-
SHA512
6281ad022050b4e225c2aff5e76b4d56fccb5ac5e191a8caea8cd77971783086be96df50fefddf20fef2e16a824db9efdea0d907ae2651b0a057f45067765336
-
SSDEEP
6144:QGgrGtFy/QTeZu5XKDV+9B6JEf5Jsz01MJr0XJvZsVWGUfDEBlkJqnVn7yEGg:QfrGtHTecZAVPwsz5ANZswGUrEQ4p2S
Score
10/10
Malware Config
Signatures
-
Lockbit
Ransomware family with multiple variants released since late 2019.
-
Rule to detect Lockbit 3.0 ransomware Windows payload 3 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\af71567efa834a7a6008885bf25c5444d9bf7e8616725ace13e1443c82ede98f.exe"C:\Users\Admin\AppData\Local\Temp\af71567efa834a7a6008885bf25c5444d9bf7e8616725ace13e1443c82ede98f.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5084 -s 3122⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5084 -ip 50841⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
4KB
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
284KB
-
Filesize
104KB
-
Filesize
236KB
-
Filesize
236KB