Managed XDR
Group-IB MDP Report
File info
Filename: home-petik-ss-malware-2024-09-20_d476d73a580668cb69339e1a07f3a9d2_lockbit
File Type: PE32 executable (GUI) Intel 80386, for MS Windows
File Size: 141.5 KB
Env info
win7/x86 en
Hashes
SHA1: bd99643360426f260110a17784a044bd3c535f08
SHA256: 55ffe83325e6aff0f033d3f6f05a6f58b5f4130f497dcfadffa0ba4390fefe66
MD5: d476d73a580668cb69339e1a07f3a9d2
Signatures
Privilege Escalation
T1134 opens_process_token: Opens the access token associated with a process
Defense Evasion
T1027.002 packer_entropy: Probably contains compressed or encrypted data
T1134 opens_process_token: Opens the access token associated with a process
Other
yara_rules: Static rules
process_crashed: One of the processes has failed
no_graphical_activity: No graphic activity
Managed XDR