LockBit Ransomware Being Distributed Using Resume and Copyright-related Emails - ASEC BLOG
Tags
| attack-pattern: | Malware - T1587.001 Malware - T1588.001 Msbuild - T1127.001 |
Common Information
| Type | Value |
|---|---|
| UUID | 551f81eb-8215-4d04-ae3d-368fc3f8d3c2 |
| Fingerprint | b4068a7b54e18676 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Feb. 24, 2022, 6:24 a.m. |
| Added to db | Sept. 11, 2022, 4:59 p.m. |
| Last updated | Nov. 17, 2024, 6:54 p.m. |
| Headline | LockBit Ransomware Being Distributed Using Resume and Copyright-related Emails |
| Title | LockBit Ransomware Being Distributed Using Resume and Copyright-related Emails - ASEC BLOG |
| Detected Hints/Tags/Attributes | 34/1/21 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/en/32054/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | File | 1 | violations.jpg |
|
| Details | File | 2 | using.exe |
|
| Details | File | 323 | winword.exe |
|
| Details | File | 13 | qbdbmgr.exe |
|
| Details | File | 14 | 360doctor.exe |
|
| Details | File | 86 | service.exe |
|
| Details | File | 3 | autorunsc64a.exe |
|
| Details | File | 25 | sysmon.exe |
|
| Details | File | 25 | sysmon64.exe |
|
| Details | File | 5 | procexp64a.exe |
|
| Details | File | 74 | procmon.exe |
|
| Details | File | 27 | procmon64.exe |
|
| Details | File | 3 | procmon64a.exe |
|
| Details | File | 38 | restore-my-files.txt |
|
| Details | File | 99 | bootsect.bak |
|
| Details | File | 243 | autorun.inf |
|
| Details | File | 100 | ntuser.dat.log |
|
| Details | File | 351 | recycle.bin |
|
| Details | File | 2 | makop.c4 |
|
| Details | md5 | 1 | 3ffea798602155f8394e5fb3c7f4a495 |
|
| Details | md5 | 1 | 4b77923447b9a1867080e3abe857e5bd |