General

  • Target

    LockBit3 RansomWare.rar

  • Size

    158KB

  • Sample

    240708-x88l3axelh

  • MD5

    348a1ec2197db2ed8fd1034fc2ed5282

  • SHA1

    e32bbdef3415a59ffbbd53648071c67404d26a7e

  • SHA256

    38a71ff442d943f02a32b4e909a7359b003d6c5872cc5f5dfa470fb0ece3d976

  • SHA512

    6762a5c1500afd0b4ac57b6005c2326d1e7ba16118a4d2a537fa847dd856ae079b83c58550e40718ef0fbc8e864e65a0eb95fb0bd6d5eb1b6b40c73a1f5b153a

  • SSDEEP

    3072:DZdYx2XkOVpXxWzyutmYS1SzeAhITgt3JpNjIB9rvzcsEK626ZLN3M:DfM23hoBS15AiTgtf9ervYT926ZL+

Malware Config

Extracted

Family

blackmatter

Version

65.239

Targets

    • Target

      LockBit3 RansomWare.rar

    • Size

      158KB

    • MD5

      348a1ec2197db2ed8fd1034fc2ed5282

    • SHA1

      e32bbdef3415a59ffbbd53648071c67404d26a7e

    • SHA256

      38a71ff442d943f02a32b4e909a7359b003d6c5872cc5f5dfa470fb0ece3d976

    • SHA512

      6762a5c1500afd0b4ac57b6005c2326d1e7ba16118a4d2a537fa847dd856ae079b83c58550e40718ef0fbc8e864e65a0eb95fb0bd6d5eb1b6b40c73a1f5b153a

    • SSDEEP

      3072:DZdYx2XkOVpXxWzyutmYS1SzeAhITgt3JpNjIB9rvzcsEK626ZLN3M:DfM23hoBS15AiTgtf9ervYT926ZL+

    • BlackMatter Ransomware

      BlackMatter ransomware group claims to be Darkside and REvil succesor.

    • Lockbit

      Ransomware family with multiple variants released since late 2019.

    • Rule to detect Lockbit 3.0 ransomware Windows payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks