General

  • Target

    2024-04-05_db11c96ba002dd649427551de5ecaf9f_darkside

  • Size

    156KB

  • MD5

    db11c96ba002dd649427551de5ecaf9f

  • SHA1

    20b1827d91195fc8e72e056e0b68b347d82f9fdb

  • SHA256

    a4e2dbdaea6b04918e9427ff04ea9d92b99ae08ea59738429ce5625c9b9fac87

  • SHA512

    17318430ba3dbab613758717b949172355d36c4b0cce4f98383132e11c9859e06a42617658223020f109a607333240ca318e5baa95f47220cc0529963ab0d435

  • SSDEEP

    3072:IDDDDDDDDDDDDDDDDDDDE45d/t6sVkgZqltP3368SdGxtFSi9v45a1xpXSW:C5d/zugZqll3jxtFSi9v/X

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_db11c96ba002dd649427551de5ecaf9f_darkside
    .exe windows:5 windows x86 arch:x86

    3bc510de773c954bd69d33670cb624d6


    Headers

    Imports

    Sections