General

  • Target

    2023-05-07_59fe569fcc6b84aa8e8e74236fc8d8e2_darkside.exe

  • Size

    3.5MB

  • MD5

    59fe569fcc6b84aa8e8e74236fc8d8e2

  • SHA1

    c9c71661709bdd9f9da212bcd5bb6373cb1e58a0

  • SHA256

    f7c432afe20c31ddd75dbb214f1b7aaeb400d9d17da6d9e3c0d7cf1dd38bf524

  • SHA512

    e06ebb09e4395303bdc5918b2c8d0cc8620b3878a87a8d64e5d1c3345a9a2e7b6bf4d3a370d68f44adf56989b610a1fe9a48bcb9855a4866186c67860ef5478c

  • SSDEEP

    98304:RkYcyokoQj+a0TVYVxNqkdrIc3zoZbNcMlC:RkLy/+/VMx8YIyzabNcMlC

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-05-07_59fe569fcc6b84aa8e8e74236fc8d8e2_darkside.exe
    .exe windows x86


    Headers

    Sections