Builds.7z
- SHA256 3968a850f5bc70d954bb5609d929f181a6f05a117fa3be4531cbd96cedfde5d6
Password
infected
Overview
overview
10Static
static
10Builds.7z
windows7-x64
1Builds.7z
windows10-2004-x64
1Builds/ESX...me.zip
windows7-x64
1Builds/ESX...me.zip
windows10-2004-x64
1Builds/LBB...ad.zip
windows7-x64
1Builds/LBB...ad.zip
windows10-2004-x64
1LBB_PS1.ps1
windows7-x64
5LBB_PS1.ps1
windows10-2004-x64
9LBB_PS1_ob...ed.ps1
windows7-x64
3LBB_PS1_ob...ed.ps1
windows10-2004-x64
3LBB_PS1_pass.ps1
windows7-x64
10LBB_PS1_pass.ps1
windows10-2004-x64
10LBB_Reflec...in.dll
windows7-x64
9LBB_Reflec...in.dll
windows10-2004-x64
7LBB_Rundll32.dll
windows7-x64
3LBB_Rundll32.dll
windows10-2004-x64
3LBB_Rundll32_pass.dll
windows7-x64
10LBB_Rundll32_pass.dll
windows10-2004-x64
10LBB_pass.exe
windows7-x64
10LBB_pass.exe
windows10-2004-x64
10Password_dll.txt
windows7-x64
1Password_dll.txt
windows10-2004-x64
1Password_exe.txt
windows7-x64
1Password_exe.txt
windows10-2004-x64
1Password_ps1.txt
windows7-x64
1Password_ps1.txt
windows10-2004-x64
1Builds/LBG...ok.zip
windows7-x64
1Builds/LBG...ok.zip
windows10-2004-x64
1FC8E43EC21...32.exe
windows7-x64
7FC8E43EC21...32.exe
windows10-2004-x64
7FC8E43EC21...64.exe
windows7-x64
7FC8E43EC21...64.exe
windows10-2004-x64
7Behavioral task
behavioral1
Sample
Builds.7z
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Builds.7z
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Builds/ESXi_vx-_____________329D6F9DDBF138D4_19.12.24_i_love_anime.zip
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
Builds/ESXi_vx-_____________329D6F9DDBF138D4_19.12.24_i_love_anime.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Builds/LBB_vx-_____________07AAB9B790E0235B_19.12.24_hacking_is_bad.zip
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
Builds/LBB_vx-_____________07AAB9B790E0235B_19.12.24_hacking_is_bad.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
LBB_PS1.ps1
Resource
win7-20240903-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral8
Sample
LBB_PS1.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
16 signatures
150 seconds
Behavioral task
behavioral9
Sample
LBB_PS1_obfuscated.ps1
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
LBB_PS1_obfuscated.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
LBB_PS1_pass.ps1
Resource
win7-20241023-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral12
Sample
LBB_PS1_pass.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral13
Sample
LBB_ReflectiveDll_DllMain.dll
Resource
win7-20240903-en
windows7-x64
13 signatures
150 seconds
Behavioral task
behavioral14
Sample
LBB_ReflectiveDll_DllMain.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral15
Sample
LBB_Rundll32.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
LBB_Rundll32.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
LBB_Rundll32_pass.dll
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral18
Sample
LBB_Rundll32_pass.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral19
Sample
LBB_pass.exe
Resource
win7-20240729-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral20
Sample
LBB_pass.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral21
Sample
Password_dll.txt
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
Password_dll.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
Password_exe.txt
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
Password_exe.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
Password_ps1.txt
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
Password_ps1.txt
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
Builds/LBG_vx-_____________FC8E43EC21BE9047_19.12.24_hacking_is_illegal_ok.zip
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral28
Sample
Builds/LBG_vx-_____________FC8E43EC21BE9047_19.12.24_hacking_is_illegal_ok.zip
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral29
Sample
FC8E43EC21BE9047/lbg32.exe
Resource
win7-20240903-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral30
Sample
FC8E43EC21BE9047/lbg32.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral31
Sample
FC8E43EC21BE9047/lbg64.exe
Resource
win7-20240903-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral32
Sample
FC8E43EC21BE9047/lbg64.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target Builds.7z
- Size 1.8MB
- Sample241219-2a2s3sskck
- SHA256 3968a850f5bc70d954bb5609d929f181a6f05a117fa3be4531cbd96cedfde5d6
- MD5 484933f81970182e04f190efe2527da1
- SHA1 72f0810a0ab7f1398ba9f0b0916ee97115e79cc4
- SHA512 d9d5d96e13201de976d23783e077bb1f95af3946a44bd1347d637893e471eefed5d9b0de4a7d84d8d2040decf8cea4e3de83555b2424e58ebbc1c7eb4881e37a
- SSDEEP 49152:bor7D7eZFTWD/gjKZ4FhydMzOoSGSW7TeXY:UfeZFT48HSCilTWB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Lockbit family
- Rule to detect Lockbit 3.0 ransomware Windows payload 3 IoCs
resource yara_rule static1/unpack003/LBB.exe family_lockbit static1/unpack003/LBB_Rundll32_pass.dll family_lockbit static1/unpack003/LBB_pass.exe family_lockbit - Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack003/LBB.exe unpack003/LBB_ReflectiveDll_DllMain.dll unpack003/LBB_Rundll32.dll unpack003/LBB_Rundll32_pass.dll unpack003/LBB_pass.exe unpack004/FC8E43EC21BE9047/lbg32.exe unpack004/FC8E43EC21BE9047/lbg64.exe
File Explorer
-
Builds.7z.7z 1.8MB
-
Builds/ESXi_vx-_____________329D6F9DDBF138D4_19.12.24_i_love_anime.zip.zip .ps1 90KB
-
329D6F9DDBF138D4/locker_ESXI_I386.elf 108KB
-
329D6F9DDBF138D4/locker_ESXI_X64.elf 93KB
-
Builds/LBB_vx-_____________07AAB9B790E0235B_19.12.24_hacking_is_bad.zip.zip 980KB
-
LBB.exe.exe 160KB
-
LBB_PS1.ps1466KB
-
LBB_PS1_obfuscated.ps1.ps1 274B
-
LBB_PS1_pass.ps1590KB
-
LBB_ReflectiveDll_DllMain.dll.dll 113KB
-
LBB_Rundll32.dll.dll 158KB
-
LBB_Rundll32_pass.dll.dll 154KB
-
LBB_pass.exe.exe 156KB
-
Password_dll.txt1KB
-
Password_exe.txt2KB
-
Password_ps1.txt1KB
-
Builds/LBG_vx-_____________FC8E43EC21BE9047_19.12.24_hacking_is_illegal_ok.zip.zip 104KB
-
FC8E43EC21BE9047/lbg32.exe.exe 60KB
-
FC8E43EC21BE9047/lbg64.exe.exe 49KB
-
Builds/LBL_vx-_____________1007BF65F80311D2_19.12.24_hacking_is_illegal_and_for_nerds.zip.zip 718KB
-
1007BF65F80311D2/locker_ARM64.elf 84KB
-
1007BF65F80311D2/locker_ARMV5.elf 103KB
-
1007BF65F80311D2/locker_ARMV7.elf 87KB
-
1007BF65F80311D2/locker_FREEBSD_AMD64.elf 89KB
-
1007BF65F80311D2/locker_LINUX_I386.elf 104KB
-
1007BF65F80311D2/locker_LINUX_X64.elf 89KB
-
1007BF65F80311D2/locker_MIPS.elf 126KB
-
1007BF65F80311D2/locker_MIPS64.elf 102KB
-
1007BF65F80311D2/locker_MIPS64EL.elf 106KB
-
1007BF65F80311D2/locker_MIPSEL.elf 126KB
-
1007BF65F80311D2/locker_POWERPC.elf 107KB
-
1007BF65F80311D2/locker_POWERPC64.elf 152KB
-
1007BF65F80311D2/locker_POWERPC64LE.elf 96KB
-
1007BF65F80311D2/locker_S390X.elf 132KB
-
1007BF65F80311D2/locker_SPARC64.elf 109KB
Builds/ESXi_vx-_____________329D6F9DDBF138D4_19.12.24_i_love_anime.zip
- SHA256 7818967ae2af71f292edd68b9811129706c160240d89babceb6ebe4ae0ff17d5
- MD5 f8601b88d1abfe52654dd0726a930f22
- SHA1 cf327abab426f1112be9907fa58dae0989f5642e
- SHA512 2073e9697358767305c9c55a92d1335a7a20e0d03d2aea59d778038812100aba375e3d9d0367f2b50f24befa8e6cea559d6d86773902c00e3733f1b12a937f32
- SSDEEP 1536:5ZaSAisBv/LXkouNev8Ge9bwwzl/njrq8Du2nFSHMx6eXAjZc/RDeJ6E5:56Bb0LNlGAbBNjO8DuWSHMxnXAQM6y
- MD5 SHA1 SHA512 SSDEEP
329D6F9DDBF138D4/locker_ESXI_I386
- SHA256 ab8c2aca725df02bfdbfa0f493575e0dacd4467b2d0cd90c9a6acb66cb14d590
- MD5 a720e32658193a7f76be72363fbc919d
- SHA1 9b319e460a7000efd92e91a6f1072c4ee211dcda
- SHA512 5f98f776e82c335f3a16deed12d654e7edb42236511c6eb0484fa0957ee7aa839ac85974864183e0be53333a558856ef39a1181839490b9f111a192dc71c2ff7
- SSDEEP 3072:5twJNAs5z2NS/P8BRlzWy5BGOiXj0hvYlx1DtqR5YeC:LwJpagWI9OiXQYlx1DtqAe
- MD5 SHA1 SHA512 SSDEEP
329D6F9DDBF138D4/locker_ESXI_X64
- SHA256 dd1cf10faf4e638bb5a0efeeaa4bc2f1c91557c22e93d3f135e7e7c7f0e7be55
- MD5 b76b092f5188ccc8a046ffb4659c3641
- SHA1 82e19d8b7bc5379528feb9c3a335d70d79358229
- SHA512 bf06f2d65f7eca482066da6b1cace219cba2e2ebae0034de3e3bae429a2e821ea2d35a41534d6d9d159ae992ef0b5c5a268a48a05ae1fbb0da69a2122631653f
- SSDEEP 1536:Jv8RiloA2YObuLk8WKP/gCILnPG+atNoU+tqRAJy+p4G:1Zl/2Ym8LZOnPG+iNoDtqRaya
- MD5 SHA1 SHA512 SSDEEP
Builds/LBB_vx-_____________07AAB9B790E0235B_19.12.24_hacking_is_bad.zip
- SHA256 1336f6c265b29ef4c4c554cadd445dc095816e8b64a584f637dbc319c848346d
- MD5 5e299a2c0bab93ec974ad9ba8b9b72b5
- SHA1 74241018f5e7fda31c0124f2c640b5a8742d25b2
- SHA512 c91b89e1c86411b018aba7a278db48a7a5c352d609764c3414b3f6322fb7aa00d2cdf520a5f67fa94ffbd39d8de97a3cf229c49f032358a7e3c4fa0f18d91160
- SSDEEP 24576:dH5RCutvjMFvwmg7/EUlsJm4vsTYXug+bk13GdSa:dH5RCuFOvwdDFlsJmUCYegYk13Gdr
- MD5 SHA1 SHA512 SSDEEP
LBB.exe
- IMPHASH 3bc510de773c954bd69d33670cb624d6
- SHA256 e2bda5afc3e70460223a98cd3520e4ab97fd126a48b9fe7d385e1e9730a11407
- MD5 d1986caa455ffa11b46341e837777e52
- SHA1 c045c2be676ebba04d7403f3636c7adb685a4011
- SHA512 ea87e4f31a45a4e54c56dc120ce26c369a02af952d0c20411677c4cba4eb442a43b776d094150458a0b72dc65b53ca29fc300739cc56f81c6f7fee5e15043359
- SSDEEP 3072:gDDDDDDDDDDDDDDDDDDDE45d/t6sVkgZqltP3368Pu7YlTx6gIB8FrN75DyW:K5d/zugZqll3AYrG+
- MD5 SHA1 SHA512 SSDEEP
-
Rule to detect Lockbit 3.0 ransomware Windows payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
111727
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdi32
SetPixel
GetPixel
GetTextColor
SelectPalette
SelectObject
GetTextMetricsW
TextOutW
GetTextCharset
CreateSolidBrush
CreateFontW
SetTextColor
CreateDIBitmap
user32
LoadImageW
GetClassNameW
DialogBoxParamW
CreateDialogParamW
kernel32
GetCommandLineA
GetAtomNameW
LoadLibraryW
GetFileAttributesW
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
LBB_PS1.ps1
- SHA256 20dd91f589ea77b84c8ed0f67bce837d1f4d7688e56754e709d467db0bea03c9
- MD5 17a7cd1ead2d35ed5d69c71d4fd7386d
- SHA1 734400d4444b88fe3848c80e3dba2ad9a5155c56
- SHA512 7d5cd9b042229d1076a587b75594a002d379396d6ec889a8aee457a6a5a399130ae0a43fe0863adae23e32e46a7d17d4b55bfc2564cb17e579751161f6778828
- SSDEEP 1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJI:VA
- MD5 SHA1 SHA512 SSDEEP
LBB_PS1_obfuscated.ps1
- SHA256 d9e7a01521d956c5ef3e07153209be63da738eee98902050c06424292d7b1387
- MD5 a8e97fe5a7115e42759d67f7e4d88b0d
- SHA1 7a4dce9165f34ca44e79b06f3a07281f6cf08823
- SHA512 77126af7f207d4ab854e3293936c73591289ca97211823513941bdae60b9da48fc3b829e2819ef1230f86cb8761eab37f6dca61281b2dfc7209ce471af68422b
- MD5 SHA1 SHA512
LBB_PS1_pass.ps1
- SHA256 82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908
- MD5 d96d2bcf13d55740f3bb64d45d2db94d
- SHA1 4ded4b1d4866a4adf534f5a4eb66386465fe3120
- SHA512 cb1fbe8f36630915796d864c5a044177ea4ad881281ec454f932232fff99ce0524fb63becd96581a23cfe12bc455d55b613aaa389aa0a68fac97748400f473bd
- SSDEEP 1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJh:QA
- MD5 SHA1 SHA512 SSDEEP
LBB_ReflectiveDll_DllMain.dll
- IMPHASH bfce782cfa0e2f22c598571118d3f91d
- SHA256 5594fea724aa3a124b259e81999f20affecb2238f7e517c56c450a3a311ab2bd
- MD5 ab5bdca69285d4838af12117c910bfde
- SHA1 208060cf988f1702124504bae0c6a4addbeb6db3
- SHA512 33c8cb31dd142defcf52ddadaa540d86d8fdd586ad3f0f280d90c66279cf09229edde08efb9daac81383f65ba171b86344c4e5c6343b02270bfa92201e08f547
- SSDEEP 3072:+/fNzovq5EKHttru48dBVFktgraAyHXU:+/Gvq5EKH6zdrFPraA
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
75092
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
gdi32
SelectObject
TextOutW
SetTextColor
SelectPalette
BitBlt
GetTextCharset
CreateSolidBrush
CreateFontW
user32
LoadMenuW
CreateMenu
DialogBoxParamW
EndDialog
GetClassNameW
GetDlgItem
GetDlgItemTextW
GetKeyNameTextW
GetWindowTextW
IsDlgButtonChecked
LoadImageW
kernel32
SetLastError
GetProcAddress
GetModuleHandleW
GetFileAttributesW
GetDateFormatW
GetCommandLineW
FreeLibrary
Name
.text
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
LBB_Rundll32.dll
- IMPHASH a6e537c4400191f066a8ccb2bd93aeb1
- SHA256 00aa54bfab3963a2c006058e48cde42e299811f9b85acbc69406c5bfb331f789
- MD5 0682f7cfceb51d4a6a213b9fe4159ad2
- SHA1 777833fdaf0c1e5d03dde300dba3947a9b65c656
- SHA512 72d79387ca0d9579d7a7bb7c6c729048bd1321fd07653cb7cbc9bedcc217fd18414b02b46f83843b3f90d0841fc61f24f0ef19700326d8a8aaf6366a00bc5113
- SSDEEP 3072:thKVNA/3U+Z15B5RPu+zYNkQA1Izqa26odDWtiSCC8lvdLW:thoyUyX5RPu+zY6+Wa26iDWsSCC8lvI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
108164
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
gdi32
TextOutW
GetTextColor
SetDCBrushColor
BitBlt
GetTextCharset
GetPixel
CreateFontW
user32
LoadImageW
GetWindowTextW
CreateDialogParamW
CreateMenu
DialogBoxParamW
EndDialog
GetClassNameW
GetDlgItemTextW
GetKeyNameTextW
GetMessageW
kernel32
LoadLibraryW
LoadLibraryExA
GetLastError
GetDateFormatW
FormatMessageW
del
gdel
gdll
gmod
pmod
sdll
wdll
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
LBB_Rundll32_pass.dll
- IMPHASH a6e537c4400191f066a8ccb2bd93aeb1
- SHA256 a98fb2671ae63d179c1cf39d163a4b3dbf769c9951a0ebad5d4c76244752253e
- MD5 b51e42d419218e70b0ae216c3ac57784
- SHA1 f3023c627d1dce8d5ff4e6733af420df350fdda7
- SHA512 96fa388526984f3976ddb5f5376af88200e3d85bc41754556f9b00be32c81332d52aeb5b1e0387ce83be220f34199a88379aa9c90f679eb17ac10f9cf8714f37
- SSDEEP 3072:sUM/b6nriEhhyj26gWNOm18JcdwgqYUkSvVDjogUliww56T9tEtc:sUsmr7yX3Um18JcdwgqYUkCRjorqGTP
- MD5 SHA1 SHA512 SSDEEP
-
Rule to detect Lockbit 3.0 ransomware Windows payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
108164
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
gdi32
TextOutW
GetTextColor
SetDCBrushColor
BitBlt
GetTextCharset
GetPixel
CreateFontW
user32
LoadImageW
GetWindowTextW
CreateDialogParamW
CreateMenu
DialogBoxParamW
EndDialog
GetClassNameW
GetDlgItemTextW
GetKeyNameTextW
GetMessageW
kernel32
LoadLibraryW
LoadLibraryExA
GetLastError
GetDateFormatW
FormatMessageW
del
gdel
gdll
gmod
pmod
sdll
wdll
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.itext
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
LBB_pass.exe
- IMPHASH 3bc510de773c954bd69d33670cb624d6
- SHA256 635e9ca3baae7e32225f05d16159e339a297a4c1b749e5a8e81ffc8df3c5c37c
- MD5 0e38243dcb91851f0646140a16d6832d
- SHA1 d5a11399206c54ef1bd11945a5f6a0d721c4a6c9
- SHA512 8198cf16b815c697e94b8b19b7555191189d6eba2e0bc2b5690277244dcf7da74907d95d8a10bb9bf43a23ae94e5fb57d062c00f947fe8558c9ef633bb066b0e
- SSDEEP 3072:iMvRBMY5u+t3YSs1C439/FgfDcTDnHNszfp0QoHkIgep3i8Skb4wE4Ab:ikBS+5YSsdLTH6zfQEupRUb
- MD5 SHA1 SHA512 SSDEEP
-
Rule to detect Lockbit 3.0 ransomware Windows payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
111727
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
gdi32
SetPixel
GetPixel
GetTextColor
SelectPalette
SelectObject
GetTextMetricsW
TextOutW
GetTextCharset
CreateSolidBrush
CreateFontW
SetTextColor
CreateDIBitmap
user32
LoadImageW
GetClassNameW
DialogBoxParamW
CreateDialogParamW
kernel32
GetCommandLineA
GetAtomNameW
LoadLibraryW
GetFileAttributesW
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.itext
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
40KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Password_dll.txt
- SHA256 def3ca6cba392323badcce705c2a84db290b6202c993ca72f212e135339c3f52
- MD5 90d07bc0f8a025f2ca071ceda59dc9e0
- SHA1 28da80a9333fe780414e7e0368998a2408d477e4
- SHA512 778ea930fc0e00d8fd5b4549034dc9ed0abee67435a057962ed69524aa715a956a7620dcdaf0e3e0a32467214fb411548fe44ccd17ada9ae1eafae79ac71b89d
- MD5 SHA1 SHA512
Password_exe.txt
- SHA256 c209135916377b1cabde1fe0f772078dd28eb255217ee8051759867ce2571bd8
- MD5 903c40280e90374e014fc11eb95d519c
- SHA1 234d6419aa259977594982cac94f695999b0e66a
- SHA512 377a5943198d2fdc3a7015a2d87338fc2ba3cabdf4f69ce2a13617894cd3ed19d6205e3bea97ac63279f5742dcce5a52e0feedcedcfd07e12a170336dd49407f
- MD5 SHA1 SHA512
Password_ps1.txt
- SHA256 fc44ae36e72db6c552ddbd7c4018fec472040c14d8026ecc265e934f198d6a3d
- MD5 e931c9344b1923f85b1290db7c3d63ff
- SHA1 bc88433836de3dbc030370a382811fedc8f555c2
- SHA512 b9be027a71f848c46326afe127ed6b1bab7585c41b6c338193cc8ddbe3b8ef77a899896dd8b6c27fc4e33cb460181daf76fb411903100e26d290b23984936125
- MD5 SHA1 SHA512
Builds/LBG_vx-_____________FC8E43EC21BE9047_19.12.24_hacking_is_illegal_ok.zip
- SHA256 b988dfd6339f208ff78a417e52e46c33f6c829529c84acb32f9a992816c12a41
- MD5 be56768da1843725c5e270aea1faabc0
- SHA1 63573f687f70711a4a7f91c308e7edea95d8d767
- SHA512 a4b5d01245e1b17545ba4540f5239cf3ee412115116721e30f190234c8e38cca734dca89c17272e2ff1548a2f357e3be52c2e8713432a5e2a448539e04fd16bb
- SSDEEP 3072:kV08Ti7c5bOIT1heswd4hJKFwkWq1XODuH1SmOA:kV5Ti73ITdY4hJKqkdODoAA
- MD5 SHA1 SHA512 SSDEEP
FC8E43EC21BE9047/lbg32.exe
- SHA256 48e2033a286775c3419bea8702a717de0b2aaf1e737ef0e6b3bf31ef6ae00eb5
- MD5 c5cc3c5cef6b382568a54f579b2965ff
- SHA1 e85b5bf2fd1ea0d5d71841f2cc8d46fc2055c22b
- SHA512 74d93ba3dc7b3fdfafe30663162dad3fee0b278d12fea527eb535b4eb25979dcc365b49cb702ac9c2addbb0ee550310759e88c2657b61a2b0e4906d4099281eb
- SSDEEP 1536:SAndsqiqdYMRgIaN04k27Gtdf/3U9s1iGbQTqL9:Fds3vIaN04kKGhjmq
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
0
Entry point
821776
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Name
.data
Size
Virtual Size
740KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
59KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
FC8E43EC21BE9047/lbg64.exe
- SHA256 3552dda80bd6875c1ed1273ca7562c9ace3de2f757266dae70f60bf204089a4a
- MD5 8ff61e4156c10b085e0c2233f24e8501
- SHA1 69d50a8efd73c619aa36113ec04368db83d9b331
- SHA512 dbde74b89d498d708215ddfdc9a2a38cb27be931c9fe2d5965aba3c31482a0efbe39913ed17eabe5eae3b5efc9cb369589784e7d9ce5b2e89505c10406038249
- SSDEEP 768:9pZt6fz03gUYxTSGCoTrxTjA+xqCkEiAOPZAzEZoo6Czcit6OjeB6:jpQRNSGCo64OxAgZUCcicvB6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
0
Entry point
1200032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
.data
Size
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
48KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Builds/LBL_vx-_____________1007BF65F80311D2_19.12.24_hacking_is_illegal_and_for_nerds.zip
- SHA256 94b6d3663a9cb696e0199b9a90033154d12075c2829c9c6b2795686f3244e2cb
- MD5 0a3fd21d4cd6a67d7aed10f77e54ae85
- SHA1 7e618907ed73bdcc22e1f5ca9a394add0bb5d96d
- SHA512 30e63fe84a10eb51cf352191d4dad89ccee2aae04a20984cd2b041fa4fd9883e8c45529683c9f48b2709f4922428cea71a8cb3e5455068cd2bc7b422fa67a92b
- SSDEEP 12288:XvdAIJaDVwmrK/UdzmafEWQIXHzop89vtV4R2R3S6aFbDOkFYT3HCtuU+fEraSKn:XvpSNrI/MEA3sS1OU4dykGjCtuUjaSKn
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_ARM64
- SHA256 ae86f2041c473ffb061518973271bda302f99391c74d12f494596edf8989f787
- MD5 e6aba198c3154facdaa8519f8104ebd8
- SHA1 ee6eae91568da7d71d0b3407c05d55b2e115c794
- SHA512 63486d2ff59d8d9517f18e493f84c7bc81f483af3edcff2e62868cab1b00c31473f3beebb4985b6452932c5589e8da76c6a4c2b9f60efe6cd5f711b034b15566
- SSDEEP 1536:xlu2A/VyIZ6K1zcvsDxvc/I1vn1y0ONBoU+Vqnl4ARSX6DDididcHQ:Xuv/QIZP1rxz1vn0joDVqnagSX6DDi0D
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_ARMV5
- SHA256 a60acd0adeccbe29ff8402db0e974eba25c9acf98a3af98940e518d465fb1bbe
- MD5 516b79a3c994df308172aa67d353ff2f
- SHA1 e312f14bc1544e20af0cd41a3571a2cbe1ebe582
- SHA512 b7a1a3e7ee64f8d0f538fdba5cc693134c475c4ce760cc4b314c26d1298794ff350eafd28a772f9da98332accb7a92674791d361bac0a17feb63e27bd4c84462
- SSDEEP 3072:0zmoAp+UN6YmA4pLCQJ91ToDVqNrPOzng:0zmbkUpmA4pFJ918DVqNrOzg
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_ARMV7
- SHA256 cfc9ba36d03736d01a6208e0c9cc3cd7db29c1f8e531f53ae7dce812f19c08bb
- MD5 89d3236f0129595a919cc70728b9316e
- SHA1 107f6e9ab0cb01247f2c5d65388dad8fb67d4804
- SHA512 ca23b1285131eacc437f44961e8bb71c52932f399a3aee35069ee2e490fc1cf8e53c0656701e938afb8930640447b0b8ecdb6885fe908a312a11ed29c8eb4466
- SSDEEP 1536:BcwSL24h5CJB/bfDZv3v+AToZTZ7rnCWz6J6nqPfBoU+Vq+Eauk2rVSx731fHBze:KFLr5CJBwHZTZaWuJt5oDVq+Eauk2rVN
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_FREEBSD_AMD64
- SHA256 3df9493be5c112266ea3ea5a3499823939c259b40f3a7b37dabba8ee7159be0e
- MD5 1eff6c83819f04149cf7a73a9ad56969
- SHA1 ae9d65a37ffaa4ee962df70c54978846c31b28f1
- SHA512 8178ca21a1f9d3e491604eea9b62b04bccddcc70ef1aa050be97aeed541065e99a01dd4dc3e221abbc6d8db3989e4a41276974d932f928cafbbeabce5274a35c
- SSDEEP 1536:8RkgM4sJraTrK1S0ybkU+tqR+Y5mzmdMzea5YT:AlsFKuS04kDtqRZ5mzMMzR
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_LINUX_I386
- SHA256 9aa74768de5b8320610a4031c07bcfb87c7b79767aa7886b640c946fbeb5f94f
- MD5 998bff093fbc351a35cd48ebc7ef74e8
- SHA1 518ae8806b471906bb1d8818f3fbce81d65a2dba
- SHA512 94c88586194de5f64ccea764a889a4dde2aa85ddb7de76bbc187edd2ac2e3f530aa5bfd27cba23f71df2de2c89870ee18206760aa99fd1d200cf01b3181045ca
- SSDEEP 3072:cMsNzSDXSpjkKAs5z2NS/P8BRlzWe4JXhcXT30hJuMDtqRmUWPG:cMsFSDs7agWIe8XhcXTOuMDtqVW
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_LINUX_X64
- SHA256 6c5252c6653d82e1ff9f57cc0dc98e6d6c7a8c3405ffc418c5b94cc7e47cf057
- MD5 194a218bb7c8593df0621789488f6907
- SHA1 89a60bc4e8b7c8188b8f3e96e799f2e455791f87
- SHA512 c9f32b7cdf3692a62a6e727148577bbdd753bac8df09f7c97075c50fd564ae780079ec3478e136c198027523b60767ab0d298ca01476361d299dc4eea9c0435b
- SSDEEP 1536:h23bmHSlAhb6eo1xrac08UGNnPnEsT9VxU+tqRAsemhgYBzvI:4rmHSlAhbx+K8UUnPEsBVxDtqR19gAI
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_MIPS
- SHA256 9c7ff1b686e05948de8d3e51dec88ff21b9b69418a10ba3e08de340f4503c064
- MD5 9700dc992a950aa6e76d8d4de5ceff38
- SHA1 45dba47c0c0358627ae1a79463ed981017d30643
- SHA512 68649687288f1dbe2e0dc202837579467eb2bc31e411d394431257fc5e3085db7283846741385e9d059bb11162bf53865e211a2d36fe8159125a377521ceff13
- SSDEEP 1536:SXzYBjV+P1NVt1dFMMaH6HULoecIJnvjK2WIAb92aUeX/ZbnBUZulb9S4AbIPLxQ:SXzKx/FLWI7kQ4/tnU04+jOoa
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_MIPS64
- SHA256 5d902e739e6f7260be361d2db72b7d44bc3ba365a12a28d33d52d69caf31b6ed
- MD5 7e3ab2c6b91d747a322869134fbf12f0
- SHA1 0fad725928f54b18a4e73480d84946aafcf8c9f7
- SHA512 5c4095dd8fa6695ba16040ec2fec68519892aa9eee252d62d5e692a282f6acff9080d5683ab6d47cd0d85e3fb7159a0208b7a8b096903a50b7534bd7967a4c47
- SSDEEP 1536:1GjEQzOECwGjN83XivT0f8NzpHXv1Iw8TwU+tqROEcglhsKLHD:EEQzBJhXqNjrDtqRpcglhsA
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_MIPS64EL
- SHA256 487bb65e3d8c9c4c9ba418de78e3bf6f3f04bf90beaf736c44cd396bec205a4f
- MD5 d5c5bc9b2405a09cc6b04d7c9415085f
- SHA1 7ff27c7a4a48767c24ed1f929407478fa03d5d3f
- SHA512 b373d3e6d04cde412a29855e0087426f193f7716f0a87c953b5fd641b4bd329d0b01f14d3a8b865ebb9804ecb6791d9b647c30285cc8bbcddf006c1b813d779d
- SSDEEP 1536:38EVxzqto2CW7QzR5NL/O/yFQtQiFU+tqRO0U9rdsm+tn9:sEVxzqqreASQ0DtqRq9
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_MIPSEL
- SHA256 db83be6e8b5bb9da4d56d4b504cb8dec77fa73318bf428c41ea679a3625e5fd7
- MD5 3ef83e355aeb863840767bbe56c1da0a
- SHA1 ca4da943a56f63f4f6b90b298d07fd2ffa8bf01d
- SHA512 0569c2a58845bcfdc32bb04e979b4eaad63527c56d67178eea50fcd33e56d0d473fd823cb4c4e3d2ba0730b511241fdccb96ed0932af97e1d89c558de3f3c724
- SSDEEP 3072:LOqVKID4Wn0E7fLDwoZ2jE3dMqqDf3H5j922222222222222222222222222222C:yqVtX0C5Z243OqqDf35j92222222222v
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_POWERPC
- SHA256 bc66e8e9581b000d7ef7f06d74a849a3491d7be5923ad7f691995e6be93063f8
- MD5 c1fcfeaa3ebbe5dbd9a4a31773f40241
- SHA1 5a76004a16705f0dbdf8cefb8cb014b7ba27b913
- SHA512 045b0cfb6e2eb07f4990957b042a28c555d680b77f867966607a2accd24f24c0f8ed23b1d6950c9b29227df813cf0d345d258e24cb06ed4f303813e95ae82d5d
- SSDEEP 3072:IgQi+NVRWJTsCor0bS+8lYbi3vK9vvTnRnfEpTvj:I1KTsCor0bS+8qbiwvbSj
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_POWERPC64
- SHA256 5245900fb984399025b30c8597b3a4d6e0924c72f067cf95b8f12d9477959dcb
- MD5 83d7889b0b330bf33c6cdd0cd5bb9d6e
- SHA1 efa5308e3e688d9b0e5d6eb9e8cb0451048b4d01
- SHA512 0b77e81ae096904c74d8b8d8d9312fd0e1ec1353079d2fdab4c2a3ddceec2a01d4d0adf758071b500746d9e613b0e423d55a21b9001dcb04c5c7f1a6bfd9ecee
- SSDEEP 768:3t1GRJAiIwTx+7Pa5LKlPzsiAD6Ixq3kHavNmJqsSKXQgHWeeUIGvz3j14fGR4iV:3yAOYfkHavNmE0elGb3KDWxLOK4+
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_POWERPC64LE
- SHA256 4591f0259e96f9030d86aa513850e0f04a7459a53557985985d93a95cc0d0e95
- MD5 6064a26127ea0806dcf6f079217c269d
- SHA1 2f38a9a97e736c772775718519d6b77fa64b3eb7
- SHA512 df7ce3cdd9404d82494311ccc397c181733c4b197ecb613fe9407181100403b0d192e52af27924cedbe78194481d3beba50778910a3c09a67a1257f716333698
- SSDEEP 1536:u/AGbscTi7Y4tiD2+e6hZm5Qmye+1DSBoU+VqiG56:EAGwcTgYQiDD/e4moDVqJo
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_S390X
- SHA256 b91b5942394195274005d1112a8096d2522eb31098ed383b64709de2a30890e8
- MD5 7b14ddcaf8dabf1f6613f8eff635c0e2
- SHA1 2c2c9025bfd0538412a2de1839d4766928f6ba5f
- SHA512 2789947e1756ec2de265d9c22d4ff2df84feb039f3caec1e3269f7c2a76618833581d06f18fcf71ebd0cb1ed78fb3bf58e73edc4bbf37d83b700ec310e0dc579
- SSDEEP 3072:+0rFsf72owSbydR4IK4mkqn0L8agqrqqrPdH2Rl7RV7:5kagKBPdWftV
- MD5 SHA1 SHA512 SSDEEP
1007BF65F80311D2/locker_SPARC64
- SHA256 d5d39ced929f5ea33e061bd308fc18cbf73b357ee680ee3d2b7606a02dadcb70
- MD5 292445fe97556d8912d99a25de8b3f32
- SHA1 6279b0d714322167fe0e6c5b3d6cf05b0580b323
- SHA512 d28ffcd72a230e25c6d1e8dbe49e02512c611a589aec9fc72e2f5be32aa38decfa15dd5abe3333e9447b6dba1b82b00ac12fcb85c6ce56c1062f92ae31f4caf8
- SSDEEP 1536:JwjT9qlLm3mYHLtVIyu7h7Jm7P/PKjMKxYFYM80oq5Y9w789NEZ:qjp267rfIyu75QPKjMKxYFLFHQY
- MD5 SHA1 SHA512 SSDEEP