Extracted

• • Target

    LockBit30.7z

  • Size

    144KB

  • MD5

    ecad36ec22515adac1190a6a46c78fb7

  • SHA1

    4f3507c3432a86df0d8eb02ea71eb1a884860724

  • SHA256

    1d6561c4714fadf16bcfb244a5444a959a953424d8e2c6acca6ccb2e20117e74

  • SHA512

    2b3edcde3bf96aaf7869d64226ee1bc97ee0956a52ff63bec9309d9916504298c24eb843901c334f76b1713996a7cd74676ddf3b24e633f8981cb5031a60dd12

  • SSDEEP

    3072:2rpwUBhAR0Kz0TO+/nB6thtGnp0gNxQ/XvE12AldjEr:2rWiuaKQ1a+p0gNxcXHgu

  Score

  10^/10

  blackmatterlockbitdiscoverypersistenceprivilege_escalationransomware

  • BlackMatter Ransomware

    BlackMatter ransomware group claims to be Darkside and REvil succesor.

    ransomwareblackmatter

  • Blackmatter family

    blackmatter

  • Lockbit

    Ransomware family with multiple variants released since late 2019.

    ransomwarelockbit

  • Lockbit family

    lockbit

  • Rule to detect Lockbit 3.0 ransomware Windows payload

  • Executes dropped EXE

  behavioral1