General

  • Target

    LBLeak.zip

  • Size

    292KB

  • MD5

    2e2b742c193749a0a4980c884e0688c2

  • SHA1

    d077620634960e6ac82706970db2158bb6198874

  • SHA256

    744214bbe4ab445a2778cc66eb4a8a5b64673b245cfbf3500e14ed70f5906ef1

  • SHA512

    dd8e846008ba3327a37393141f4719ff92c06b5bdfcdbad6e2cbc49c1bfb679b0c5cd315b14a7e4ab36cc0c593b1001b536cd5d6e603312c5675b9d666f0381d

  • SSDEEP

    6144:dZ+V+SbhfAX6RDoZXFSnsLtby3v/t+nUNEXcFgokhOJcTENhtJlJ:DkmFFbbyHcWcOJ7zJ

Score
10/10

Malware Config

Extracted

Family

blackmatter

Version

65.239

Signatures

  • Blackmatter family
  • Lockbit family
  • Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • LBLeak.zip
    .zip
  • LBLeak/Build.bat
  • LBLeak/builder.exe
    .exe windows:5 windows x86 arch:x86

    d2e26e45dcb84f1062f90f29a9cf0faa


    Headers

    Imports

    Sections

  • LBLeak/config.json
  • LBLeak/keygen.exe
    .exe windows:5 windows x86 arch:x86

    73eeda700d0a0376845c61c44155f4a8


    Headers

    Imports

    Sections