Overview

overview

10

Static

static

10

LB3.exe

windows7-x64

9

LB3.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Build.7z

  • Size

    468KB

  • MD5

    4b25a3c2a802a67f95258579bdb9e5e4

  • SHA1

    b0cda3601759ab31dd713e5d8dc64e71805fbd67

  • SHA256

    1da5db573fd3cb8b02537c09367e6c1ab0a1c0afda05fa642f4763be780d1c6e

  • SHA512

    c0a4cfc9e5602d5bbf564717aba5b436fafff0a56d633ea034e9c52177323e259728341394c4996fd106c68536cca89026cf38ed791a1f426f3c87979cafe80f

  • SSDEEP

    6144:uVCyPVhXs4xGjut/k4Ghfe8gaKJ1tZpmAOy777Aw4RYvadNH1wh4y3ePWb3C9ezP:vUhXlGUKhKTtfOy7A1Eav2f3XTC9ek7w

Score
10/10
lockbit

Malware Config

Signatures

  • Lockbit family
    lockbit
  • Rule to detect Lockbit 3.0 ransomware Windows payload 3 IoCs
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • Build.7z
    .7z
  • DECRYPTION_ID.txt
  • LB3.exe
    .exe windows:5 windows x86 arch:x86

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections

  • LB3Decryptor.exe
    .exe windows:5 windows x86 arch:x86

    4585cfc85e0cd554d6b5d4bf1bb3d5e4


    Headers

    Imports

    Sections

  • LB3_ReflectiveDll_DllMain.dll
    .dll windows:5 windows x86 arch:x86

    b1826e7d9522633dc1f4953f25424ce3


    Headers

    Imports

    Sections

  • LB3_Rundll32.dll
    .dll windows:5 windows x86 arch:x86

    b750c147c0bcc8b349e4f1143ac1432e


    Headers

    Imports

    Exports

    Sections

  • LB3_Rundll32_pass.dll
    .dll windows:5 windows x86 arch:x86

    b750c147c0bcc8b349e4f1143ac1432e


    Headers

    Imports

    Exports

    Sections

  • LB3_pass.exe
    .exe windows:5 windows x86 arch:x86

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections

  • Password_dll.txt
  • Password_exe.txt
  • priv.key
  • pub.key