General

  • Target

    2023-05-04_32c38a4cc55685e42527cf058b6a569a_darkside.exe

  • Size

    153KB

  • MD5

    32c38a4cc55685e42527cf058b6a569a

  • SHA1

    e08e9f477ab6976cdbfd85f21e7b0223f080c4a8

  • SHA256

    5c0b075c85e3160eaf3ab76163bcb42d9535dec0ea459ae6a31a6dab2dba7265

  • SHA512

    903356414d2fd828147ddd29017fb2fb9446aa4cfdb6961e79cfd8a2a0c9e00640fd51c04aa85dcd98db51f7f8098dc0c31784f02910ae50fcff5680c03380d1

  • SSDEEP

    3072:pqJogYkcSNm9V7DjLaVSuu7EElaJ0KogPMAT:pq2kc4m9tDjlEuaSKHM

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-05-04_32c38a4cc55685e42527cf058b6a569a_darkside.exe
    .exe windows x86

    914685b69f2ac2ff61b6b0f1883a054d


    Headers

    Imports

    Sections