Overview

overview

10

Static

static

10

LB3.exe

windows7-x64

9

LB3.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Build.7z

  • Size

    468KB

  • Sample

    240708-esby2ssakj

  • MD5

    4b25a3c2a802a67f95258579bdb9e5e4

  • SHA1

    b0cda3601759ab31dd713e5d8dc64e71805fbd67

  • SHA256

    1da5db573fd3cb8b02537c09367e6c1ab0a1c0afda05fa642f4763be780d1c6e

  • SHA512

    c0a4cfc9e5602d5bbf564717aba5b436fafff0a56d633ea034e9c52177323e259728341394c4996fd106c68536cca89026cf38ed791a1f426f3c87979cafe80f

  • SSDEEP

    6144:uVCyPVhXs4xGjut/k4Ghfe8gaKJ1tZpmAOy777Aw4RYvadNH1wh4y3ePWb3C9ezP:vUhXlGUKhKTtfOy7A1Eav2f3XTC9ek7w

Score
10/10
lockbitransomwarespywarestealer

Malware Config

Targets

    • Target

      LB3.exe

    • Size

      145KB

    • MD5

      f24e4d221c73ebf1c2fb12d15c13fde9

    • SHA1

      019ef3cbd70a0c4e3ea5c45ec4afdc28a655ed81

    • SHA256

      4f006379bbd3a2b2611346595ce373595031177d7043200591d81150aefc8ee0

    • SHA512

      1508ebf2cba481eda06707d133b994932688d6d3be6c1373e9e88bf8c36a02331df31dc1a575b6e4ed8a160294c88ae8767115af16af94e51b1589bdeedd1629

    • SSDEEP

      3072:H6glyuxE4GsUPnliByocWepMIO/oULmUHI:H6gDBGpvEByocWeGy6

    Score
    9/10
    ransomwarespywarestealer

    • Renames multiple (321) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

      ransomware

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks