Overview

overview

10

Static

static

10

1250ba6f25...4b.exe

windows7-x64

10

1250ba6f25...4b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    250307-em8qtszphe_pw_infected.zip

  • Size

    98KB

  • MD5

    7de904eca177e48c53a0fe6d37c0ff0f

  • SHA1

    3379325e81ec0498e4dcb70e52eb2562dc5319a3

  • SHA256

    e3872250429f509c7bdfa0c99b85f12e489ffea0d276f9205b67387b7aa380f7

  • SHA512

    09655b8ce3005283036f5d64c8bc71a8969effba9bb5df8e34667f610d633bb35d501dbd7464b662076cc9fd99dc3c0132c2c78551fdb5d3784bafd42f3d560c

  • SSDEEP

    3072:wlFvBjtAOefQdHAdKXnPNr45NCyguIz6vijzJ:wlSOefQ5XPNr7z6El

Score
10/10
lockbit

Malware Config

Signatures

  • Lockbit family
    lockbit
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250307-em8qtszphe_pw_infected.zip
    .zip

    Password: infected

  • 1250ba6f25fd60077f698a2617c15f89d58c1867339bfd9ee8ab19ce9943304b
    .exe windows:5 windows x86 arch:x86

    Password: infected

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections