General

  • Target

    lb4_svchost.exe

  • Size

    145KB

  • MD5

    0e7adc219b82b823214edc523797b83e

  • SHA1

    eb40b252523621aea48448efc0bf6b971cc906e7

  • SHA256

    5a3cc12e20a0ecc79f526cd28344d24f48ff4f6da89235293edd264f02f69404

  • SHA512

    44ab6ea43112e2c361c1303a4fb5e6edb9e0390c9c571ae0c8d7a87cb0a472d9fc2f034c98235db2676019bf025e09d5bfa7e783cfa4de5225be7acc9e51ba97

  • SSDEEP

    1536:izICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xD5bwnHm/1BviIdU/IqbNLu75RjJ:hqJogYkcSNm9V7D50nH2viI2xadRj1T

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lb4_svchost.exe
    .exe windows:5 windows x86 arch:x86

    914685b69f2ac2ff61b6b0f1883a054d


    Headers

    Imports

    Sections