General

  • Target

    2024-06-29_621bb53f62c71defefea37178100d671_lockbit

  • Size

    168KB

  • MD5

    621bb53f62c71defefea37178100d671

  • SHA1

    99d4351ec38435e55f62f270e1a55f4bd672fc53

  • SHA256

    2184eb38de8b87f82e8222895e89c92ec07c872e275e7091275f4abf3452b605

  • SHA512

    34c54f98780407deafe0a6ef8d979c50fe50d613d24e4bdc1cf4cee2fa8f3b1896433e92285f2922133b264cccc67eed40a2b4b5c9fa8fbf6078b057a4da115c

  • SSDEEP

    3072:o9K3Y2oTgnZsG1Q1RieB7gIB4HKm/lgYs+4ylDe:SK7PnKd1RiehgIBo1nq

Score
10/10

Malware Config

Signatures

  • Detects LgoogLoader payload 1 IoCs
  • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
  • Detects executables Discord URL observed in first stage droppers 1 IoCs
  • Lgoogloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-29_621bb53f62c71defefea37178100d671_lockbit
    .exe windows:6 windows x86 arch:x86

    625d3bbf2ce862f2dd2f97a50e86cb4f


    Headers

    Imports

    Sections