General

  • Target

    21455636188.zip

  • Size

    196KB

  • MD5

    484f2c6ce34fc47996931ca220ea7924

  • SHA1

    75d16219b24a0edcd0b97849f51e56fcf21a8975

  • SHA256

    11ad4ca7c9fa415283e0c81563b0e0f900b3afabf2384f50387f5f5bef0b45f3

  • SHA512

    f5850fcf7d35debb828d534d6ec8a760b93300759a6e21f3cac6a6f01df326d62bbd78bc54c21e23b690f47b69d40f12b8fcadbeb9bbdf6e817d4ee00e02e844

  • SSDEEP

    3072:LpQq47JHuhw/u/+Sk+uFO1LskrcCzQgTXDmVX9C0l+Unrsai0Hjus8+LADvm8:LaqtWyJugCKXTTmi0lRwai0HzHkvl

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 21455636188.zip
    .zip

    Password: infected

  • d5aca3f6d58366df1e8765c304b0deba3f0d16097f52087755e8c1ca61601390
    .zip
  • Babuk.exe
    .exe windows:5 windows x86 arch:x86

    914685b69f2ac2ff61b6b0f1883a054d


    Headers

    Imports

    Sections

  • Lockbit4.0 Builder leaked Password=123.rar
    .rar