Overview

overview

10

Static

static

10

test3.zip

windows7-x64

10

test3.zip

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test3.zip

  • Size

    102KB

  • Sample

    241004-kbg2maxhmf

  • MD5

    0e325d00fd30af4577f7a1df57a67b3f

  • SHA1

    a3f86e3a702dba6582b967217e411af3b662d771

  • SHA256

    28664daf83a19ae6efd7caf9433600981fbb7c95025f473dc4e6099b603512a0

  • SHA512

    5802d619ffb5bba93183d2d1ccb25c516e13e6ed801b37737a8aafeeb3577c8a12bf36308eb57f6621e69e2589b82f1fd7d4c4b4b669c3df4622acae22faa1c7

  • SSDEEP

    3072:Wwa7KxzWhIKXRzJUGdje+7Yenbw85eNwnaYeW02aa:Wwa7NhIKYG0+EeHeSa912aa

Score
10/10
lockbitdiscoveryransomware

Malware Config

Targets

    • Target

      test3.zip

    • Size

      102KB

    • MD5

      0e325d00fd30af4577f7a1df57a67b3f

    • SHA1

      a3f86e3a702dba6582b967217e411af3b662d771

    • SHA256

      28664daf83a19ae6efd7caf9433600981fbb7c95025f473dc4e6099b603512a0

    • SHA512

      5802d619ffb5bba93183d2d1ccb25c516e13e6ed801b37737a8aafeeb3577c8a12bf36308eb57f6621e69e2589b82f1fd7d4c4b4b669c3df4622acae22faa1c7

    • SSDEEP

      3072:Wwa7KxzWhIKXRzJUGdje+7Yenbw85eNwnaYeW02aa:Wwa7NhIKYG0+EeHeSa912aa

    Score
    10/10
    lockbitdiscoveryransomware

    • Lockbit

      Ransomware family with multiple variants released since late 2019.

      ransomwarelockbit

    • Rule to detect Lockbit 3.0 ransomware Windows payload

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks