lockbit | 6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30 | Triage

Submit
Reports

Overview

overview

Static

static

1

6adb8f7da4...30.ps1

windows7-x64

6adb8f7da4...30.ps1

windows10-2004-x64

Sharing

General

Target

6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30.ps1
Size

590KB
Sample

241224-evatrs1mhw
MD5

2b84852065e28974e4081826ff09ddc1
SHA1

fa70a7f2a36ba300f57b130a31ef1ab66a1397ac
SHA256

6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30
SHA512

63f44bc545a7b7da355903f99dcbfd0033756f41717bc9b210bdc2094f97c2efa68dee814d03e392d94e579ae170e16ef447f86b07363b1fedffa7c7d3b54ce1
SSDEEP

1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJw:cR

Score

10^/10

lockbit discovery execution ransomware

Static task

static1

Behavioral task

behavioral1

Sample

6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30.ps1

Resource

win7-20240903-en

lockbit discovery execution ransomware

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30.ps1

Resource

win10v2004-20241007-en

lockbit discovery execution ransomware

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30.ps1
- Size
  
  590KB
- MD5
  
  2b84852065e28974e4081826ff09ddc1
- SHA1
  
  fa70a7f2a36ba300f57b130a31ef1ab66a1397ac
- SHA256
  
  6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30
- SHA512
  
  63f44bc545a7b7da355903f99dcbfd0033756f41717bc9b210bdc2094f97c2efa68dee814d03e392d94e579ae170e16ef447f86b07363b1fedffa7c7d3b54ce1
- SSDEEP
  
  1536:Kk0H/lFq+N1mfoRlNyjZk11iBQcIY1Y+qFMJFOgvZ/wpKDcalOGODPNTbJYj6CJw:cR
Score

10^/10

lockbit discovery execution ransomware
- Lockbit
  Ransomware family with multiple variants released since late 2019.
  ransomware lockbit
- Lockbit family
  lockbit
- Rule to detect Lockbit 3.0 ransomware Windows payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lockbitdiscoveryexecutionransomware

behavioral2

lockbitdiscoveryexecutionransomware

© 2018-2024

Terms | Privacy