lockbit | 82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908 | Triage

Submit
Reports

Overview

overview

Static

static

1

82d89a75d8...08.ps1

windows7-x64

82d89a75d8...08.ps1

windows10-2004-x64

Sharing

General

Target

82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908.ps1
Size

590KB
Sample

241223-nzn2mazjcp
MD5

d96d2bcf13d55740f3bb64d45d2db94d
SHA1

4ded4b1d4866a4adf534f5a4eb66386465fe3120
SHA256

82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908
SHA512

cb1fbe8f36630915796d864c5a044177ea4ad881281ec454f932232fff99ce0524fb63becd96581a23cfe12bc455d55b613aaa389aa0a68fac97748400f473bd
SSDEEP

1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJh:QA

Score

10^/10

lockbit discovery execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908.ps1

Resource

win7-20241010-en

lockbit discovery execution ransomware

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908.ps1

Resource

win10v2004-20241007-en

lockbit discovery execution ransomware

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908.ps1
- Size
  
  590KB
- MD5
  
  d96d2bcf13d55740f3bb64d45d2db94d
- SHA1
  
  4ded4b1d4866a4adf534f5a4eb66386465fe3120
- SHA256
  
  82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908
- SHA512
  
  cb1fbe8f36630915796d864c5a044177ea4ad881281ec454f932232fff99ce0524fb63becd96581a23cfe12bc455d55b613aaa389aa0a68fac97748400f473bd
- SSDEEP
  
  1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJh:QA
Score

10^/10

lockbit discovery execution ransomware
- Lockbit
  Ransomware family with multiple variants released since late 2019.
  ransomware lockbit
- Lockbit family
  lockbit
- Rule to detect Lockbit 3.0 ransomware Windows payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lockbitdiscoveryexecutionransomware

behavioral2

lockbitdiscoveryexecutionransomware

© 2018-2024

Terms | Privacy