General

  • Target

    https://bazaar.abuse.ch/sample/a736269f5f3a9f2e11dd776e352e1801bc28bb699e47876784b8ef761e0062db/

  • Sample

    240922-12acgaxhnp

Malware Config

Extracted

Family

blackmatter

Version

25.239

Targets

    • Target

      https://bazaar.abuse.ch/sample/a736269f5f3a9f2e11dd776e352e1801bc28bb699e47876784b8ef761e0062db/

    • BlackMatter Ransomware

      BlackMatter ransomware group claims to be Darkside and REvil succesor.

    • Lockbit

      Ransomware family with multiple variants released since late 2019.

    • Rule to detect Lockbit 3.0 ransomware Windows payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks