Analysis
-
max time kernel
93s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
31-05-2024 12:29
General
-
Target
1b8c7ae5a13b10631f19f3a2f6860e77749739b596aa87c54b3fd0aa43578549.exe
-
Size
344KB
-
MD5
4594ff00611c357d3694def60f132815
-
SHA1
61c38540623b2dc7f75cc463831681b2a01c19d2
-
SHA256
1b8c7ae5a13b10631f19f3a2f6860e77749739b596aa87c54b3fd0aa43578549
-
SHA512
92f898b2eed0fc65e9e3037e07db836de4864e1a12afccd0e18f136019fdabe1a0a753843c94e71a3f565226245a2d7706590671d5aef4b3f913bdad90c3966c
-
SSDEEP
6144:jOtqhWEEfruHmDbayfVeJJ1pHlI2a4h3MgP10P1WsBConRyfcSoJs/L:atqhcTZ1fVSJbHlK4hcgP1QWRoRyf6
Score
10/10
Malware Config
Signatures
-
Lockbit
Ransomware family with multiple variants released since late 2019.
-
Rule to detect Lockbit 3.0 ransomware Windows payload 5 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b8c7ae5a13b10631f19f3a2f6860e77749739b596aa87c54b3fd0aa43578549.exe"C:\Users\Admin\AppData\Local\Temp\1b8c7ae5a13b10631f19f3a2f6860e77749739b596aa87c54b3fd0aa43578549.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3056 -s 3002⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3056 -ip 30561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
4KB
-
Filesize
236KB
-
Filesize
4KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
264KB
-
Filesize
236KB