General

  • Target

    LockBit3 RansomWare.rar

  • Size

    158KB

  • MD5

    348a1ec2197db2ed8fd1034fc2ed5282

  • SHA1

    e32bbdef3415a59ffbbd53648071c67404d26a7e

  • SHA256

    38a71ff442d943f02a32b4e909a7359b003d6c5872cc5f5dfa470fb0ece3d976

  • SHA512

    6762a5c1500afd0b4ac57b6005c2326d1e7ba16118a4d2a537fa847dd856ae079b83c58550e40718ef0fbc8e864e65a0eb95fb0bd6d5eb1b6b40c73a1f5b153a

  • SSDEEP

    3072:DZdYx2XkOVpXxWzyutmYS1SzeAhITgt3JpNjIB9rvzcsEK626ZLN3M:DfM23hoBS15AiTgtf9ervYT926ZL+

Score
10/10

Malware Config

Extracted

Family

blackmatter

Version

65.239

Signatures

  • Blackmatter family
  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • LockBit3 RansomWare.rar
    .rar
  • LockBit3 RansomWare/Build.bat
  • LockBit3 RansomWare/builder.exe
    .exe windows:5 windows x86 arch:x86

    d2e26e45dcb84f1062f90f29a9cf0faa


    Headers

    Imports

    Sections

  • LockBit3 RansomWare/config.json
  • LockBit3 RansomWare/keygen.exe
    .exe windows:5 windows x86 arch:x86

    73eeda700d0a0376845c61c44155f4a8


    Headers

    Imports

    Sections