General

  • Target
    LockBit-main.zip
  • Size 292KB
  • Sample261103-xrgf9abb79
  • SHA256 707bb3b958fbf4728d8a39b043e8df083e0fce1178dac60c0d984604ec23c881
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • blackmatter

Version
  • 25.239

Targets

    • Target
      LockBit-main.zip
    • Size 292KB
    • SHA256 707bb3b958fbf4728d8a39b043e8df083e0fce1178dac60c0d984604ec23c881
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: BlackMatter Ransomware

      BlackMatter ransomware group claims to be Darkside and REvil succesor.

    • Family: Lockbit

      Ransomware family with multiple variants released since late 2019.

    • Rule to detect Lockbit 3.0 ransomware Windows payload

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks