General

  • Target

    2024-09-22_fd68012fa7c5c63d393aa44b039cd193_darkside

  • Size

    147KB

  • MD5

    fd68012fa7c5c63d393aa44b039cd193

  • SHA1

    62084644f50562eefc223c0b505f77ba1d953e5e

  • SHA256

    cf6305a67821101a2613f779dfb463a776b2353f0fe81ceeaf1c5c70039e5d7b

  • SHA512

    98d00d758303473040a509ffecf938a976702707fa1fb8ef98f8b2df4ef9ce7ef2ff714a11f1284bfff31a9edb62144f797cddff24394faded5e156fbe475077

  • SSDEEP

    1536:CzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDYM3UFLzhoDGBxkFQBoBml6ziNS:BqJogYkcSNm9V7DDENzyqxkbml6BbBT

Score
10/10

Malware Config

Signatures

  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-22_fd68012fa7c5c63d393aa44b039cd193_darkside
    .exe windows:5 windows x86 arch:x86

    914685b69f2ac2ff61b6b0f1883a054d


    Headers

    Imports

    Sections