Analysis
-
max time kernel
149s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
26-11-2024 18:04
General
-
Target
LockBit-Black-Builder-main/LockBit30/Build/LB3Decryptor.exe
-
Size
54KB
-
MD5
d1c15784587717fe03448d0c4dc8dd5b
-
SHA1
f36ac101949a4fa8f604d561957fb9d3e1f73699
-
SHA256
4973313c1c003a27190fba0a43dda1be78891552c9fabaa0c65e0051965ceee7
-
SHA512
ef81b11962fb56a583c43ecdf0f8c66ef17850e85e56794b6c4ca328751609e4fe1fb1494e0e7315ff396510c467e440b74b62c105ce226f2fda49379d551a81
-
SSDEEP
768:llD2N5KCJD5rkdDRib1Xf0854bhC3E9zpKMMYj1MYgFMRx:nAkCJD5rKDRib1F54NLp2Yj1M7MD
Score
7/10
Malware Config
Signatures
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 13 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\LockBit-Black-Builder-main\LockBit30\Build\LB3Decryptor.exe"C:\Users\Admin\AppData\Local\Temp\LockBit-Black-Builder-main\LockBit30\Build\LB3Decryptor.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken