General

  • Target

    2024-06-20_7021fda2c2246666ad9077f408fc8171_lockbit

  • Size

    862KB

  • MD5

    7021fda2c2246666ad9077f408fc8171

  • SHA1

    2493affe8c14d21c741c8fd45d4b94358c543dc2

  • SHA256

    1b2176a06a4ba25c4a15a3a2b1da83bc7abe078a76892ba14c2a2f95a9c10d48

  • SHA512

    fcc558870d05c0b3cee10f8d69f20d10bdfd9039e0b64036156d3d0dd45f69933b0c89d687095d8c9eb62ea5914954ceb58a0c12fef14740447d176486a02c6f

  • SSDEEP

    24576:7xAf2NuubB6RWspgjuwu7pl4Ha+UmxJH+QHF:1AfSrWW4g+7Ht+UmxJeU

Score
10/10

Malware Config

Signatures

  • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
  • Detects executables containing anti-forensic artifacts of deleting USN change journal. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-20_7021fda2c2246666ad9077f408fc8171_lockbit
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections