lockbit | 69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527 | Triage

Submit
Reports

Overview

overview

Static

static

1

69487c2f91...27.ps1

windows7-x64

69487c2f91...27.ps1

windows10-2004-x64

Sharing

General

Target

69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527.ps1
Size

590KB
Sample

241223-nnv1ssypfz
MD5

e0411fcbbff0e20922d224c3ac8c811e
SHA1

1083bc3407717b9953ffe27ec8ef3f0a520fbc82
SHA256

69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527
SHA512

0555dbe49cc4ac2e432b85e847ac48113d74651f8c238329645b1bb07968d3418e92122b7750a3902793824a932647fe5c27c1c3e841a010a354d789c358eba3
SSDEEP

1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJt:cA

Score

10^/10

lockbit discovery execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527.ps1

Resource

win7-20240903-en

lockbit discovery execution ransomware

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527.ps1

Resource

win10v2004-20241007-en

lockbit discovery execution ransomware

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527.ps1
- Size
  
  590KB
- MD5
  
  e0411fcbbff0e20922d224c3ac8c811e
- SHA1
  
  1083bc3407717b9953ffe27ec8ef3f0a520fbc82
- SHA256
  
  69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527
- SHA512
  
  0555dbe49cc4ac2e432b85e847ac48113d74651f8c238329645b1bb07968d3418e92122b7750a3902793824a932647fe5c27c1c3e841a010a354d789c358eba3
- SSDEEP
  
  1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJt:cA
Score

10^/10

lockbit discovery execution ransomware
- Lockbit
  Ransomware family with multiple variants released since late 2019.
  ransomware lockbit
- Lockbit family
  lockbit
- Rule to detect Lockbit 3.0 ransomware Windows payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lockbitdiscoveryexecutionransomware

behavioral2

lockbitdiscoveryexecutionransomware

© 2018-2024

Terms | Privacy