Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
12-06-2024 03:52
General
-
Target
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db.exe
-
Size
352KB
-
MD5
a5a6b11ceee8cf70c3ae1fd8a26e16cd
-
SHA1
244e6f7828c48899a475ff388061d8f2bfbe6840
-
SHA256
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db
-
SHA512
3d397c803909fc32c67c7017369ebc092fabf388a1fa234d0dca36c607bd99751bca90ec54d7c8d1fa603df2cdc4cc0e8c953470377515c9b14b3131e08c3e4d
-
SSDEEP
6144:LjY/tQlhzDh1g9V264ZAAb2wGfuxwntI2nFLA7ZS0fXqP5JC3YY0Ax/IJF:X591g9Vv4GACvm/n7ZSyO8IY06/In
Score
10/10
Malware Config
Signatures
-
Lockbit
Ransomware family with multiple variants released since late 2019.
-
Rule to detect Lockbit 3.0 ransomware Windows payload 5 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db.exe"C:\Users\Admin\AppData\Local\Temp\c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3216 -s 5482⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3216 -ip 32161⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
96KB
-
Filesize
236KB
-
Filesize
4KB
-
Filesize
236KB