General
- Target lockbitv1.exe
- Size 13.4MB
- Sample261101-2pc39sfx2l
- SHA256 8667e97e84737c739a71c17d8e38ec5ca22518a6572918f487b69976ec9dfc4b
- MD5 6a87c3b9cb56e82bf99855571ecdc322
- SHA1 fd044b7a82c8a2fed6689562bbb46a594706a595
- SHA512 4744ea23ec11bb56c4989647b4fe7a0394486c8447c11e87dd5c07cfa0a7db882bfd960e9da34a29f2246a17c9685d35fbc2c24304b67346efc2be67f598ec2f
- SSDEEP 196608:MkUZ0W8/LafPuowgMoPrv4QEhs2SV5lien8aLMAX7h5kSZvxig/lVJIJ7QDcIJ:H7W8QMgNTv4fShB8CM6CU5h/lV6RSH
- TLSH T18DE6336CB76608E8D85E6334A4E14276D9B27C7907B0C2CF16F94A612E672E5FF34342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Behavioral task
behavioral1
Sample
lockbitv1.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
lockbitv1.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target lockbitv1.exe
- Size 13.4MB
- SHA256 8667e97e84737c739a71c17d8e38ec5ca22518a6572918f487b69976ec9dfc4b
- MD5 6a87c3b9cb56e82bf99855571ecdc322
- SHA1 fd044b7a82c8a2fed6689562bbb46a594706a595
- SHA512 4744ea23ec11bb56c4989647b4fe7a0394486c8447c11e87dd5c07cfa0a7db882bfd960e9da34a29f2246a17c9685d35fbc2c24304b67346efc2be67f598ec2f
- SSDEEP 196608:MkUZ0W8/LafPuowgMoPrv4QEhs2SV5lien8aLMAX7h5kSZvxig/lVJIJ7QDcIJ:H7W8QMgNTv4fShB8CM6CU5h/lV6RSH
- TLSH T18DE6336CB76608E8D85E6334A4E14276D9B27C7907B0C2CF16F94A612E672E5FF34342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Renames multiple (76) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Disables Task Manager via registry modification
-
Loads dropped DLL