Analysis
- max time kernel
149s - max time network
108s - platform
windows11-21h2_x64 - resource
win11-20250619-en - resource tags
- submitted
06/05/2026, 17:17
General
- Target 2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit.exe
- Size 229KB
- Sample260506-vtrc5ae19x
- SHA256 304b1df0e431700c9eb5a47a8e0f252f9f46e54062e5e046d850a65651a9a5eb
Score
9/10
Malware Config
Signatures
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
- Sets desktop wallpaper using registry 2 TTPs 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 9 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-06_bd40ffdba81a0a84eefb29a76cdba84a_elex_lockbit.exe"1⤵
- Enumerates connected drives
- Sets desktop wallpaper using registry
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery