{"id":"054314733888215dd469adcbdee14d46","title":"LockBit — LockBit · ransomware · PE","md5":"054314733888215dd469adcbdee14d46","sha256":"25fba0e92d00184dde662c7d30aff006851dba296daa6f6f82ce797b66789ed2","family":"LockBit","apt":null,"verdict":"malicious","sample_type":"ransomware","lang":"native","file_format":"PE","compiler":null,"published_at":"2026-07-26T08:31:41.338Z","summary":"x86_64 PE 勒索木马，判定为 LockBit 变种。.text 熵 7.878 表明加壳，导入仅含 LoadLibraryA/GetProcAddress/VirtualProtect 四个 API（典型存根模式）。多引擎情报 55/75 恶意，社区沙箱威胁分 100，多位引擎明确报 LockBit。静态脱壳仅得噪声碎片，需运行时 dump。威胁假设：加壳勒索载荷，运行时解压执行文件加密与勒索信投放。","url":"https://zseceye.com/report/054314733888215dd469adcbdee14d46","json_url":"https://zseceye.com/report/054314733888215dd469adcbdee14d46.json","html_url":"https://zseceye.com/report/054314733888215dd469adcbdee14d46","hash_urls":{"md5":"https://zseceye.com/hash/054314733888215dd469adcbdee14d46","sha256":"https://zseceye.com/hash/25fba0e92d00184dde662c7d30aff006851dba296daa6f6f82ce797b66789ed2"},"search_urls":{"md5":"https://zseceye.com/?q=054314733888215dd469adcbdee14d46","sha256":"https://zseceye.com/?q=25fba0e92d00184dde662c7d30aff006851dba296daa6f6f82ce797b66789ed2"},"sample_download_url":"https://zseceye.com/report/054314733888215dd469adcbdee14d46/sample","sample_filename":"sample.zip","iocs":[{"type":"filename","value":"2d6171LockBit.exe","description":"社区提交名之一"},{"type":"filename","value":"lbg64.exe","description":"社区提交名之一 (LockBit 64位)"},{"type":"filename","value":"lockbit.exe","description":"社区提交名之一"},{"type":"md5","value":"054314733888215dd469adcbdee14d46","description":"样本 MD5"},{"type":"other","value":".text 节熵 7.878 / 整体熵 7.84 / 编译时间戳=0 / .data virtual_size=1146880 raw_size=0","description":"静态异常特征（用于 YARA/IDS 狩猎）"},{"type":"sha256","value":"25fba0e92d00184dde662c7d30aff006851dba296daa6f6f82ce797b66789ed2","description":"样本 SHA256"}],"ips":[]}