General

  • Target

    2024-03-19_40f632c70bef7d1450d564c639b24281_darkside

  • Size

    149KB

  • MD5

    40f632c70bef7d1450d564c639b24281

  • SHA1

    ebc73c9eef3d74f1ca455a981438bafbd64a7143

  • SHA256

    cb16529ceffd1113a296fb62fce70778342649c63f50cae4362bccf7b4f76cf0

  • SHA512

    988c035329b14ecd51f4e7e271dbbeb07db1a6061e9962c8eaeeba8a20c793a0047910f64eaf43c826e9532e05cbc635d7d69003001a2cb80aa7a880be0512e5

  • SSDEEP

    3072:b6glyuxE4GsUPnliByocWepJsWE+/lTnPI8tRLOFIIhl:b6gDBGpvEByocWeoj+/lTnbOO

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_40f632c70bef7d1450d564c639b24281_darkside
    .exe windows:5 windows x86 arch:x86

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections