General
-
Target
LockBit3 RansomWare.rar
-
Size
158KB
-
Sample
240708-x88l3axelh
-
MD5
348a1ec2197db2ed8fd1034fc2ed5282
-
SHA1
e32bbdef3415a59ffbbd53648071c67404d26a7e
-
SHA256
38a71ff442d943f02a32b4e909a7359b003d6c5872cc5f5dfa470fb0ece3d976
-
SHA512
6762a5c1500afd0b4ac57b6005c2326d1e7ba16118a4d2a537fa847dd856ae079b83c58550e40718ef0fbc8e864e65a0eb95fb0bd6d5eb1b6b40c73a1f5b153a
-
SSDEEP
3072:DZdYx2XkOVpXxWzyutmYS1SzeAhITgt3JpNjIB9rvzcsEK626ZLN3M:DfM23hoBS15AiTgtf9ervYT926ZL+
Behavioral task
behavioral1
Sample
LockBit3 RansomWare.rar
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
LockBit3 RansomWare.rar
Resource
win10v2004-20240704-en
Malware Config
Extracted
blackmatter
65.239
Targets
-
-
Target
LockBit3 RansomWare.rar
-
Size
158KB
-
MD5
348a1ec2197db2ed8fd1034fc2ed5282
-
SHA1
e32bbdef3415a59ffbbd53648071c67404d26a7e
-
SHA256
38a71ff442d943f02a32b4e909a7359b003d6c5872cc5f5dfa470fb0ece3d976
-
SHA512
6762a5c1500afd0b4ac57b6005c2326d1e7ba16118a4d2a537fa847dd856ae079b83c58550e40718ef0fbc8e864e65a0eb95fb0bd6d5eb1b6b40c73a1f5b153a
-
SSDEEP
3072:DZdYx2XkOVpXxWzyutmYS1SzeAhITgt3JpNjIB9rvzcsEK626ZLN3M:DfM23hoBS15AiTgtf9ervYT926ZL+
Score10/10-
BlackMatter Ransomware
BlackMatter ransomware group claims to be Darkside and REvil succesor.
-
Rule to detect Lockbit 3.0 ransomware Windows payload
-
Executes dropped EXE
-