LockBit 3.0: "Making the ransomware great again" - Cluster25
Tags
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Model Debugger Evasion - T1622 Malicious File - T1204.002 Malware - T1587.001 Malware - T1588.001 Native Api - T1575 Phishing - T1660 Phishing - T1566 Software - T1592.002 Spearphishing Attachment - T1566.001 Spearphishing Attachment - T1598.002 Tool - T1588.002 Vulnerabilities - T1588.006 Access Token Manipulation - T1134 Deobfuscate/Decode Files Or Information - T1140 Execution Through Api - T1106 Modify Registry - T1112 Spearphishing Attachment - T1193 User Execution - T1204 Spearphishing Attachment User Execution
Show in Graph
Common Information
Type Value
UUID 9f3d53d1-58c7-4fd2-ab3d-2437b13fd6ac
Fingerprint b6d46079f7ed8690
Analysis status DONE
Considered CTI value 2
Text language
Published July 6, 2022, 3:57 p.m.
Added to db June 5, 2023, 10:12 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline LockBit 3.0: “Making the ransomware great again”
Title LockBit 3.0: "Making the ransomware great again" - Cluster25
Detected Hints/Tags/Attributes 68/3/14
Source URLs
Redirection Url
Details Source https://blog.cluster25.duskrise.com/2022/07/06/lockbit-3-0-making-the-ransomware-great-again
Details Source https://cluster25.io/2022/07/06/lockbit-3-0-making-the-ransomware-great-again/
URL Provider
Details Provider Source level domain
Details cluster25.io cluster25.io
Details duskrise.com blog.cluster25.duskrise.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 28 ✔ — https://blog.cluster25.duskrise.com/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 1 
hljknskoq.ico
Details File 12 
splwow64.exe
Details md5 4 
db66023ab2abcb9957fb01ed50cdfa6a
Details md5 1 
38745539b71cf201bb502437f891d799
Details sha1 1 
f2a72bee623659d3ba16b365024020868246d901
Details sha256 4 
80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce
Details MITRE ATT&CK Techniques 310 
T1566.001
Details MITRE ATT&CK Techniques 239 
T1106
Details MITRE ATT&CK Techniques 365 
T1204.002
Details MITRE ATT&CK Techniques 116 
T1134
Details MITRE ATT&CK Techniques 52 
T1622
Details MITRE ATT&CK Techniques 504 
T1140
Details MITRE ATT&CK Techniques 550 
T1112
Details Windows Registry Key 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels