Overview

overview

10

Static

static

10

w_host.exe

windows7-x64

10

w_host.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    w_host.exe

  • Size

    143KB

  • Sample

    240724-lqjdnssdnd

  • MD5

    b26a24e15ae0132316878b49861c4898

  • SHA1

    efcea3d03a59231513f9b4149dbbfa219cbcd6fa

  • SHA256

    a3e1da88e71e2f002834108df350192c0b4f2b398ec7eb439a47489ca5afe7ec

  • SHA512

    d2d6bf9d03eae290ddd3a823426fc484d6cff8ad725e5f600bb6bfe7c75b8713e77aaaeff1fefd492559cfe633df2673082406af0a12ffd3691d4bb4f9759c68

  • SSDEEP

    3072:ry2emiCabzig/ZbiB59FjF2tqc3/yezChDGT/7gLf7T764kHyvC:rhLiCab+AC9xF2tNyeehDGr7gLf7Xy4C

Score
10/10
lockbitdiscoveryransomware

Malware Config

Targets

    • Target

      w_host.exe

    • Size

      143KB

    • MD5

      b26a24e15ae0132316878b49861c4898

    • SHA1

      efcea3d03a59231513f9b4149dbbfa219cbcd6fa

    • SHA256

      a3e1da88e71e2f002834108df350192c0b4f2b398ec7eb439a47489ca5afe7ec

    • SHA512

      d2d6bf9d03eae290ddd3a823426fc484d6cff8ad725e5f600bb6bfe7c75b8713e77aaaeff1fefd492559cfe633df2673082406af0a12ffd3691d4bb4f9759c68

    • SSDEEP

      3072:ry2emiCabzig/ZbiB59FjF2tqc3/yezChDGT/7gLf7T764kHyvC:rhLiCab+AC9xF2tNyeehDGr7gLf7Xy4C

    Score
    10/10
    lockbitdiscoveryransomware

    • Lockbit

      Ransomware family with multiple variants released since late 2019.

      ransomwarelockbit

    • Rule to detect Lockbit 3.0 ransomware Windows payload

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks