General

  • Target

    {04830965-76E6-6A9A-8EE1-6AF7499C1D08}.zip

  • Size

    160KB

  • Sample

    250117-j78nsaykey

  • MD5

    ba9ad420b3560110b323b1145212fa0f

  • SHA1

    37c0b397385c14c181f9d29dde39996a0394cbe9

  • SHA256

    b711d6247a467d516c23151639608177e37c80e80d09d6afd4766a7daac1637e

  • SHA512

    20a8baf51e11ab081be713166e2f48884f200a019b571816ea93c7f86d125e6fdbb1e892f7765b2f6c36aa800c913970ad0e59bef94d3c56f9a88a3b2c7541fd

  • SSDEEP

    3072:93FuyHZtF389cNNTK5rX81YVvyeH83xqemprWMvhD6O7PMshMaeT8oBP:9c6FsWNNTUrsmt5chhmYsl6O7PMYjA8a

Malware Config

Targets

    • Target

      {04830965-76E6-6A9A-8EE1-6AF7499C1D08}.zip

    • Size

      160KB

    • MD5

      ba9ad420b3560110b323b1145212fa0f

    • SHA1

      37c0b397385c14c181f9d29dde39996a0394cbe9

    • SHA256

      b711d6247a467d516c23151639608177e37c80e80d09d6afd4766a7daac1637e

    • SHA512

      20a8baf51e11ab081be713166e2f48884f200a019b571816ea93c7f86d125e6fdbb1e892f7765b2f6c36aa800c913970ad0e59bef94d3c56f9a88a3b2c7541fd

    • SSDEEP

      3072:93FuyHZtF389cNNTK5rX81YVvyeH83xqemprWMvhD6O7PMshMaeT8oBP:9c6FsWNNTUrsmt5chhmYsl6O7PMYjA8a

    • Lockbit

      Ransomware family with multiple variants released since late 2019.

    • Lockbit family

    • Rule to detect Lockbit 3.0 ransomware Windows payload

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks