General
- Target 2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit
- Size 229KB
- Sample260506-vtrc5ae19x
- SHA256 304b1df0e431700c9eb5a47a8e0f252f9f46e54062e5e046d850a65651a9a5eb
- MD5 bd40ffdba81a0a84eefb29a76cdba84a
- SHA1 3d0fa1a84685d6409254dde1ccbd0e6e147f2b08
- SHA512 54f5898c4be189ea388bbf2caafce49a3d74b36740d0adb6fb6bdb3d1b77b2ce44e5f5fc697b057cf487928ad3ff52a02ffcdfc86ac23f6a62ec9c4dd69c689a
- SSDEEP 3072:sQTd3zHZ0DELbTauBsEOhYWKab2aUzP3+uXwluZvGNIn3btZUV0c8xNml8GiPcd:sQV50DErtMtTA6uXwl0vEsfUery
- TLSH T1DE344B40D6174AA5CC1235BA41BE99B7A9314B3082B5DDFB5BC46AC8C753F8933323A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit.exe
Resource
win11-20250619-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit
- Size 229KB
- SHA256 304b1df0e431700c9eb5a47a8e0f252f9f46e54062e5e046d850a65651a9a5eb
- MD5 bd40ffdba81a0a84eefb29a76cdba84a
- SHA1 3d0fa1a84685d6409254dde1ccbd0e6e147f2b08
- SHA512 54f5898c4be189ea388bbf2caafce49a3d74b36740d0adb6fb6bdb3d1b77b2ce44e5f5fc697b057cf487928ad3ff52a02ffcdfc86ac23f6a62ec9c4dd69c689a
- SSDEEP 3072:sQTd3zHZ0DELbTauBsEOhYWKab2aUzP3+uXwluZvGNIn3btZUV0c8xNml8GiPcd:sQV50DErtMtTA6uXwl0vEsfUery
- TLSH T1DE344B40D6174AA5CC1235BA41BE99B7A9314B3082B5DDFB5BC46AC8C753F8933323A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Sets desktop wallpaper using registry
-
Suspicious use of NtSetInformationThreadHideFromDebugger