General

  • Target

    2024-01-28_c9637dbb7b567da3766c4969de7b0fff_darkside

  • Size

    153KB

  • MD5

    c9637dbb7b567da3766c4969de7b0fff

  • SHA1

    5ae0bed967193212d084e5ec9a21ed26cf4ca064

  • SHA256

    4c8686a732540fdd4b5d5c76e95e15a714edf7681f375b6a9a9441f54af4b304

  • SHA512

    1e2d51b88266e69eed24ebbb075de8b9b43da81a3880f6ed894e248b75c3584d56b2c3a225b5a773f54044901c340150d675280712f90165e98dd6cd2d97d90e

  • SSDEEP

    3072:y6glyuxE4GsUPnliByocWepo+K8GITMejoNDJ5+L:y6gDBGpvEByocWevpGITMejgDJQ

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_c9637dbb7b567da3766c4969de7b0fff_darkside
    .exe windows:5 windows x86 arch:x86

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections