General

  • Target

    2024-04-27_1fa72ca7645f9288f471e52d973d5c86_darkside

  • Size

    161KB

  • MD5

    1fa72ca7645f9288f471e52d973d5c86

  • SHA1

    c3f9c359b80889fe693c87654afcef6a0da537f4

  • SHA256

    a7be13c5bd3c9e975fa5650050d7afd53a88229781f3797e6160e310086cc6a0

  • SHA512

    406aee1f65c3401502073cb90a4725eaa6b613313fbcc40640fbab94751069dad1532108e036205d1be91e204b7c0a2ac3c784ea7aeb0361f46787347555571f

  • SSDEEP

    3072:v6glyuxE4GsUPnliByocWepXKD0/9Wy1Og/ZK99rZ:v6gDBGpvEByocWehKD0/EWfg3N

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_1fa72ca7645f9288f471e52d973d5c86_darkside
    .exe windows:5 windows x86 arch:x86

    41fb8cb2943df6de998b35a9d28668e8


    Headers

    Imports

    Sections