General

  • Target

    2024-04-05_404e48d0a6f72388427372e5c09dc9a8_darkside

  • Size

    157KB

  • MD5

    404e48d0a6f72388427372e5c09dc9a8

  • SHA1

    a786eef9b8863cbee826a3eff850c538d6140292

  • SHA256

    a86c573ef8fceb4656059637ce1083f1ffb62130b9da41fd36096fbe9ebb5cb8

  • SHA512

    04082f67c20b769b5b35686ff66325fe4d7f2bfba4b2ba05d0d5824e75e12444e621d566058132b6ac6fd5ba955621a4dda85159191c9628b5f5668229147234

  • SSDEEP

    3072:XDDDDDDDDDDDDDDDDDDDE45d/t6sVkgZqltP3368Pznp5uGPlDL4W:J5d/zugZqll3zznp5PlD

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_404e48d0a6f72388427372e5c09dc9a8_darkside
    .exe windows:5 windows x86 arch:x86

    3bc510de773c954bd69d33670cb624d6


    Headers

    Imports

    Sections