Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
27-11-2024 18:43
Behavioral task
behavioral1
Sample
Lockbit-Ransomware-Builder-main (1).zip
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Lockbit-Ransomware-Builder-main (1).zip
Resource
win10v2004-20241007-en
windows10-2004-x64
27 signatures
150 seconds
General
-
Target
Lockbit-Ransomware-Builder-main (1).zip
-
Size
283KB
-
MD5
0f4c1f0cbe1e3ad1b4fdb0f8de101938
-
SHA1
c7edeff3353e58c4133fb456d17ac6593c1882c4
-
SHA256
7f899996d4bc193a1739b8f9ca51a7f46a7d41007f472df5622208e2db62b232
-
SHA512
98793bae94bfb3baff6f3f76d2c9251eee64d5ec305f3b2384b2bf5157872a1cb83809fa4a5fdb40ed4bd14761936ce43a6c3575e17a2c91b6df7319db06ecbc
-
SSDEEP
6144:eW+LYvU1+OsOtX2lUFW+LYvU1+OsOtX2lUpW+LYvU1+OsOtX2lUK:WeItX2l2eItX2lUeItX2l9
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
7zFM.exedescription pid Process Token: SeRestorePrivilege 2084 7zFM.exe Token: 35 2084 7zFM.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
7zFM.exepid Process 2084 7zFM.exe