lockbit | 0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9 | Triage

Submit
Reports

Overview

overview

Static

static

1

0c516038b8...e9.ps1

windows7-x64

0c516038b8...e9.ps1

windows10-2004-x64

Sharing

General

Target

0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9.ps1
Size

590KB
Sample

241223-nvmb8syqct
MD5

7e525ef64a4e27fbb325d7cb4653f0a1
SHA1

8d3756c9e7a78a5a7dd8fca67e7de51a9ea59a52
SHA256

0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9
SHA512

ec9832d42f86fd086a929c0a5cb31d7d3839d6e5b5c8c15670c477b507a2b66f60ce438006fb11a20522c7ede600e098c3f385720191851b91d5945eb0e50372
SSDEEP

1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJs:QR

Score

10^/10

lockbit discovery execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9.ps1

Resource

win7-20241010-en

lockbit discovery execution ransomware

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9.ps1

Resource

win10v2004-20241007-en

lockbit discovery execution ransomware

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9.ps1
- Size
  
  590KB
- MD5
  
  7e525ef64a4e27fbb325d7cb4653f0a1
- SHA1
  
  8d3756c9e7a78a5a7dd8fca67e7de51a9ea59a52
- SHA256
  
  0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9
- SHA512
  
  ec9832d42f86fd086a929c0a5cb31d7d3839d6e5b5c8c15670c477b507a2b66f60ce438006fb11a20522c7ede600e098c3f385720191851b91d5945eb0e50372
- SSDEEP
  
  1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJs:QR
Score

10^/10

lockbit discovery execution ransomware
- Lockbit
  Ransomware family with multiple variants released since late 2019.
  ransomware lockbit
- Lockbit family
  lockbit
- Rule to detect Lockbit 3.0 ransomware Windows payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lockbitdiscoveryexecutionransomware

behavioral2

lockbitdiscoveryexecutionransomware

© 2018-2024

Terms | Privacy