General

  • Target

    2024-06-13_603ab1d26637ce590df341e468795968_darkside

  • Size

    1.2MB

  • MD5

    603ab1d26637ce590df341e468795968

  • SHA1

    1713ba54373bbdfed5b07e6244e1597ac94f5e2c

  • SHA256

    c2006d3fd1a8d1943421da6154751e7b53cc799a8bac833a6a95ef1dd2e06c45

  • SHA512

    81e29123cb6ce89e2442077dfb647b94752c0578507d2294135af8ef3ffb420f6f16d6d0a06be6a570143798adb63db3d874274bb9bab42bf190633419460268

  • SSDEEP

    24576:Pj4SJslvwqeH5TDdy6gGYXI152bFYEGsMOPRgH8vt+t7d1LeEqotPntpMWhP+c3O:P8J7IaOac4Mn3tAjXLz

Score
10/10

Malware Config

Signatures

  • Detects executables packed with BoxedApp 1 IoCs
  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_603ab1d26637ce590df341e468795968_darkside
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections