Overview

overview

10

Static

static

10

LockBit3.0...ld.bat

windows10-2004-x64

1

LockBit3.0...er.exe

windows10-2004-x64

LockBit3.0...en.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LockBit3.0 builder .rar

  • Size

    158KB

  • MD5

    438e994e567237cd837c7d1ab4cca381

  • SHA1

    6d43e78e66f703a212a33a7fea46191267679fd3

  • SHA256

    f7d05c0e9430ba0621020caad12fa1e8e62acb3bda349cd03240c1938ce7a887

  • SHA512

    cae464209b30e92bb9ed78d5ddc6fe08a1b2aa89e8d70fa0e57a67dadf4c177e88d888ee3fc06351ad4abe54af749e3ae10671dd4953a6e896f1f7c26aaf5524

  • SSDEEP

    3072:slWtN53dw/7+YMflx6m43+T0yw095ZtYxnBLF7rjT+154SIHg2afvX3Y6ZM:sG7tA+YQln43+T0gfivLF/jiXfv4N

Score
10/10
lockbitblackmatter

Malware Config

Extracted

Family

blackmatter

Version

25.239

Signatures

  • Blackmatter family
    blackmatter
  • Lockbit family
    lockbit
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • LockBit3.0 builder .rar
    .rar

    Password: WARLOCK_DARK_ARMY_OFFICIALS

  • LockBit3.0 builder /Build.bat
  • LockBit3.0 builder /builder.exe
    .exe windows:5 windows x86 arch:x86

    Password: WARLOCK_DARK_ARMY_OFFICIALS

    d2e26e45dcb84f1062f90f29a9cf0faa


    Headers

    Imports

    Sections

  • LockBit3.0 builder /config.json
  • LockBit3.0 builder /keygen.exe
    .exe windows:5 windows x86 arch:x86

    Password: WARLOCK_DARK_ARMY_OFFICIALS

    73eeda700d0a0376845c61c44155f4a8


    Headers

    Imports

    Sections

  • LockBit3.0 builder /readme.txt