Overview

overview

10

Static

static

10

LockBit-ma...or.exe

windows7-x64

10

LockBit-ma...or.exe

windows10-2004-x64

10

LockBit-ma...or.exe

windows7-x64

10

LockBit-ma...or.exe

windows10-2004-x64

10

LockBit-ma...er.exe

windows7-x64

10

LockBit-ma...er.exe

windows10-2004-x64

10

LockBit-ma...or.exe

windows7-x64

10

LockBit-ma...or.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LockBit-main.zip

  • Size

    3.4MB

  • MD5

    48c928de6458fac060c281e3febc1a15

  • SHA1

    e6ed8102960a159063edd62695926d16be32ce60

  • SHA256

    ff652f97ac93507e30fca7446d266d82e5ad1ca4066b1e5dc81b5e3256e393b4

  • SHA512

    01abc3d99d8ecb19991a0a70c5e10fb4b86b70edcf1492d9827edd72e70fb1c2596ab6e49261bc31965fb68be8749fb622bf3050458eb44aec9230f567228daf

  • SSDEEP

    98304:1TKYu1ibTKwig1isTKQTK3D1i5I39BPiv12FpQiwilbl4:1OYu1sOng1tOQO3D1CI3Tg1epQiwsba

Score
10/10
rhadamanthys

Malware Config

Extracted

Family

rhadamanthys

C2

https://195.3.223.126:4287/9d0dc091285eb9fbf2e/o8f3c8oj.8rdif

Signatures

  • Rhadamanthys family
    rhadamanthys
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • LockBit-main.zip
    .zip
  • LockBit-main/.gitignore
  • LockBit-main/Debug/decryptor.exe
    .exe windows:4 windows x86 arch:x86

    eca0c30b65294d02a6c6180a6b323b58


    Headers

    Imports

    Sections

  • LockBit-main/Debug/decryptor.ilk
  • LockBit-main/Debug/decryptor.pdb
  • LockBit-main/LICENSE
  • LockBit-main/README.md
  • LockBit-main/Release/R3ADM3.txt
  • LockBit-main/Release/decryptor.exe
    .exe windows:4 windows x86 arch:x86

    eca0c30b65294d02a6c6180a6b323b58


    Headers

    Imports

    Sections

  • LockBit-main/Release/decryptor.iobj
  • LockBit-main/Release/decryptor.ipdb
  • LockBit-main/Release/decryptor.pdb
  • LockBit-main/builder.exe
    .exe windows:4 windows x86 arch:x86

    eca0c30b65294d02a6c6180a6b323b58


    Headers

    Imports

    Sections

  • LockBit-main/builder/builder.vcxproj
    .xml
  • LockBit-main/builder/builder.vcxproj.filters
  • LockBit-main/builder/builder.vcxproj.user
  • LockBit-main/decryptor/decryptor.exe
    .exe windows:4 windows x86 arch:x86

    eca0c30b65294d02a6c6180a6b323b58


    Headers

    Imports

    Sections

  • LockBit-main/decryptor/decryptor.ilk
  • LockBit-main/decryptor/decryptor.pdb
  • LockBit-main/locker/Debug/locker.Build.CppClean.log
  • LockBit-main/locker/Debug/locker.log
  • LockBit-main/locker/Debug/vc142.idb
  • LockBit-main/locker/Debug/vc142.pdb
  • LockBit-main/locker/GetApi.h
  • LockBit-main/locker/MetaRandom2.h
  • LockBit-main/locker/MetaString.h
  • LockBit-main/locker/Release/locker.Build.CppClean.log
  • LockBit-main/locker/Release/locker.log
  • LockBit-main/locker/Release/vc140.pdb
  • LockBit-main/locker/antihook/antihooks.h
  • LockBit-main/locker/api.h
  • LockBit-main/locker/chacha20/chacha.c
  • LockBit-main/locker/chacha20/chacha.h
  • LockBit-main/locker/chacha20/ecrypt-config.h
  • LockBit-main/locker/chacha20/ecrypt-machine.h
  • LockBit-main/locker/chacha20/ecrypt-portable.h
  • LockBit-main/locker/chacha20/ecrypt-sync.h
  • LockBit-main/locker/common.h
  • LockBit-main/locker/filesystem.h
  • LockBit-main/locker/global_parameters.h
  • LockBit-main/locker/hash.h
  • LockBit-main/locker/locker.h
  • LockBit-main/locker/locker.vcxproj
    .xml
  • LockBit-main/locker/locker.vcxproj.filters
  • LockBit-main/locker/locker.vcxproj.user
  • LockBit-main/locker/logs.h
  • LockBit-main/locker/memory.h
  • LockBit-main/locker/network_scanner.h
  • LockBit-main/locker/ntdll.h
  • LockBit-main/locker/process_killer.h
  • LockBit-main/locker/queue.h
  • LockBit-main/locker/threadpool.h