General

  • Target

    LBLeak.zip

  • Size

    290KB

  • MD5

    596b1c4610d5c9fb84b146c529e8dc06

  • SHA1

    87918831ede21b31676daa0b78eab085030b0510

  • SHA256

    5280435bea53aa35b848742096bc700fce70b34b92becdedb6c50d60bc06164e

  • SHA512

    1ebd7ef344b4c892e86eb61a7ad3a468a4cd623149b86c58c73b81dc73941efd9ee21130790e3058c741a285ab675f032edbc97b0ed05f64bee7ad399ca6a072

  • SSDEEP

    6144:FVdaI6w6cydkurJFlx00MLBUmYiKKbEX4L7YEVC8rKm7EMTIq:FL8JcyrrJFHbyQiJw+7VCGKmwMN

Score
10/10

Malware Config

Extracted

Family

blackmatter

Version

65.239

Signatures

  • Blackmatter family
  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • LBLeak.zip
    .zip
  • LBLeak/Build.bat
  • LBLeak/builder.exe
    .exe windows:5 windows x86 arch:x86

    d2e26e45dcb84f1062f90f29a9cf0faa


    Headers

    Imports

    Sections

  • LBLeak/config.json
  • LBLeak/keygen.exe
    .exe windows:5 windows x86 arch:x86

    73eeda700d0a0376845c61c44155f4a8


    Headers

    Imports

    Sections