Overview

overview

10

Static

static

10

triage/Build.bat

windows7-x64

1

triage/Build.bat

windows10-2004-x64

1

triage/builder.exe

windows7-x64

1

triage/builder.exe

windows10-2004-x64

1

triage/config.json

windows7-x64

3

triage/config.json

windows10-2004-x64

3

triage/keygen.exe

windows7-x64

1

triage/keygen.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    triage.rar

  • Size

    157KB

  • MD5

    bd11583af62f9a9cac0802217647b787

  • SHA1

    e7e7abfd3b7eaeadf719fff0492b027318907378

  • SHA256

    1b8dbedf6136cd2c742daba48bcecd584421a4456a78f7b907cadd4f76e5e90b

  • SHA512

    a3a9a4cb3fc85736a9d22db241107178d853e5db95e37a3874f62d449c68ae33d228a40572d14942e2ab242976ffe14dfb2009d323cada66b466694544e84bb0

  • SSDEEP

    3072:8PPGQJjZ1cA1KCGpzmHfZ3jl5Uh9HDsBFq7nffBgH5FbnMt3X2Xes:QGQJkAPUh98qL2nQX2Xes

Score
10/10
lockbitblackmatter

Malware Config

Extracted

Family

blackmatter

Version

25.239

Signatures

  • Blackmatter family
    blackmatter
  • Lockbit family
    lockbit
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • triage.rar
    .rar
  • triage/Build.bat
  • triage/builder.exe
    .exe windows:5 windows x86 arch:x86

    d2e26e45dcb84f1062f90f29a9cf0faa


    Headers

    Imports

    Sections

  • triage/config.json
  • triage/keygen.exe
    .exe windows:5 windows x86 arch:x86

    73eeda700d0a0376845c61c44155f4a8


    Headers

    Imports

    Sections