Meet LockBit: The Most Prevalent Ransomware in 2022 | FortiGuard Labs
Tags
cmtmf-attack-pattern: Supply Chain Compromise
country: Armenia Belarus Estonia Georgia Kazakhstan Kyrgyzstan Latvia Lithuania Moldova Tajikistan Uzbekistan Turkmenistan Ukraine
maec-delivery-vectors: Watering Hole
attack-pattern: Data Drive-By Compromise - T1456 Malware - T1587.001 Malware - T1588.001 Network Devices - T1584.008 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Supply Chain Compromise - T1474 Tool - T1588.002 Vulnerabilities - T1588.006 Drive-By Compromise - T1189 Supply Chain Compromise - T1195 Denial Of Service Drive-By Compromise Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID e52e2344-94f5-4c48-8e5e-885c3be2b2b0
Fingerprint a6726132d37c2646
Analysis status DONE
Considered CTI value 2
Text language
Published July 10, 2023, 10:04 a.m.
Added to db Aug. 12, 2023, 1:50 a.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline Meet LockBit: The Most Prevalent Ransomware in 2022
Title Meet LockBit: The Most Prevalent Ransomware in 2022 | FortiGuard Labs
Detected Hints/Tags/Attributes 133/4/98
Source URLs
Redirection Url
Details Redirection https://feeds.fortinet.com/~/752694230/0/fortinet/blog/threat-research~Meet-LockBit-The-Most-Prevalent-Ransomware-in
Details Source https://www.fortinet.com/blog/threat-research/lockbit-most-prevalent-ransomware
URL Provider
Details Provider Source level domain
Details fortinet.com www.fortinet.com
Details fortinet.com feeds.fortinet.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 117 ✔ Fortinet All Blogs https://feeds.feedburner.com/fortinet/blogs 2024-08-30 22:08
Details 122 ✔ Fortinet Threat Research Blog https://feeds.fortinet.com/fortinet/blog/threat-research 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 115 
cve-2023-0669
Details CVE 140 
cve-2023-27350
Details CVE 397 
cve-2021-44228
Details CVE 31 
cve-2021-22986
Details CVE 217 
cve-2020-1472
Details CVE 197 
cve-2019-0708
Details CVE 150 
cve-2018-13379
Details CVE 26 
cve-2021-36942
Details CVE 17 
cve-2022-36537
Details CVE 168 
cve-2021-34473
Details CVE 142 
cve-2021-34523
Details CVE 143 
cve-2021-31207
Details Domain 2 
onion.ly
Details Domain 1373 
twitter.com
Details Domain 179 
www.torproject.org
Details Domain 622 
en.wikipedia.org
Details Domain 7 
gdpr.eu
Details Domain 8 
gdpr-info.eu
Details Domain 2 
papercut.ng
Details Domain 1 
f5.icontrol.rest
Details Domain 7 
ms.windows
Details Domain 1 
ms.windows.rdp.channel
Details Domain 1 
ms.exchange
Details File 38 
restore-my-files.txt
Details File 13 
apache.log
Details File 49 
error.log
Details File 41 
code.exe
Details File 1 
f5.ico
Details File 14 
command.exe
Details File 1 
pathname.inf
Details sha256 1 
49c0acf512146620dd26f515804324c8e4b4cc8eb8b9ab5d9c57e201241bc7ae
Details sha256 4 
c8205792fbc0a5efc6b8f0f2257514990bfaa987768c4839d413dd10721e8871
Details sha256 4 
13849c0c923bfed5ab37224d59e2d12e3e72f97dc7f539136ae09484cbe8e5e0
Details sha256 1 
4d0113884f70ddbbaf1ee0365602124ba91c11a76ff7bff5908d310aa9d3dfe9
Details sha256 2 
6fedf83e76d76c59c8ad0da4c5af28f23a12119779f793fd253231b5e3b00a1a
Details sha256 2 
70cb1a8cb4259b72b704e81349c2ad5ac60cd1254a810ef68757f8c9409e3ea6
Details sha256 1 
9595abf24d1fa80a476c2711cd788820e9f75da015c2c8726a0a44bca0444ddf
Details sha256 2 
b02d57f1c4f7f233044a56fdc57c89b6cc3661479dccc3b4cfa1f6f9d20cd893
Details sha256 1 
cff048ed06cf900170562906bded4a8fd166185a1b785f5ece0e2a842cf52d46
Details sha256 4 
ec88f821d22e5553afb94b4834f91ecdedeb27d9ebfd882a7d8f33b5f12ac38d
Details sha256 6 
0a937d4fe8aa6cb947b95841c490d73e452a3cafcd92645afc353006786aba76
Details sha256 4 
0e66029132a885143b87b1e49e32663a52737bbff4ab96186e9e5e829aa2915f
Details sha256 5 
0f178bc093b6b9d25924a85d9a7dde64592215599733e83e3bbc6df219564335
Details sha256 4 
0f5d71496ab540c3395cfc024778a7ac5c6b5418f165cc753ea2b2befbd42d51
Details sha256 4 
15a7d528587ffc860f038bb5be5e90b79060fbba5948766d9f8aa46381ccde8a
Details sha256 3 
286bffaa9c81abfb938fe65be198770c38115cdec95865a241f913769e9bfd3f
Details sha256 5 
410c884d883ebe2172507b5eadd10bc8a2ae2564ba0d33b1e84e5f3c22bd3677
Details sha256 3 
76a77def28acf51b2b7cdcbfaa182fe5726dd3f9e891682a4efc3226640b9c78
Details sha256 5 
e3f236e4aeb73f8f8f0caebe46f53abbb2f71fa4b266a34ab50e01933709e877
Details sha256 3 
faa3453ceb1bd4e5b0b10171eaa908e56e7275173178010fcc323fdea67a6869
Details sha256 1 
3f8ab65e3733ca62001500f7fcb83057869c869345affa4701fbd4d7207e6899
Details sha256 1 
4b09da2f1d94bc0fd2fd8be7b723172349e03e71117dfe483da06ac207f3e124
Details sha256 1 
5b5f3fc7bd943bd6bb575406018bf6401c6e6956ed92d54f634ba754e993d2d2
Details sha256 1 
897b23cc1af331a972da64e298163fbe0f1fd4d6bd983d452a889c1d285a1a27
Details sha256 1 
f35ba7686462a868a90bb8d9567e42e34064f91f54aeb5ed74b0d0b0e19badac
Details sha256 1 
059399f01e9bd588b42dbaf61c7a3b5aa6a48ba15a3ed13bdca7ce13a71a8526
Details sha256 2 
161c951e6d2e8d07571fc451a28a9feafb672c1f05586768f8178f33a9d74efb
Details sha256 2 
329e77a8a304e38ce4c4ed8906f9a7594377a3da64505fd1935b58acfc9ab4b9
Details sha256 1 
c6d3ff77910e991c6d782a3961c58ef69643c7d000b9c2d31e19904f2020dc6c
Details sha256 1 
ef870afba5951592f7d2964613a7819b9c92c7c6f6bd5c6fd2aa46978deaca34
Details sha256 1 
6aee637b88a06f7cc4813b47719717a64e39047f33617930a6cd11fc25fbca0a
Details sha256 2 
7d7357e4963c7d6f087a11e22d683cacf614dc7f269c2907bbb12ae30f2b007d
Details sha256 2 
97320395d90b28ad3d5cd0ed0416b0fe379cc0cc3d65f0b27e50db4da5902ec2
Details sha256 2 
cb537a122fb0531f14c76dfd0a87cc304c26a9ab01aec46a5fd17f268ac80854
Details sha256 2 
f1ecb57988caf26216683b1314607f06f8bf051632ff7ba73f17c2dc9b3aafcc
Details sha256 2 
072d0633006eeafc77c0b0144fdac84a57fa1e4f8b96d9aa33d377bd789bc533
Details sha256 2 
12b6fead37cca9d8ca4c00c2a9d56c0a402e760ab309356f078587acb7f33396
Details sha256 2 
58729cd09a74e3f69d26653b71412f9c9285ffaba52a9beb5b6d634014c98e1a
Details sha256 1 
aa0d0c6dcb69623ac4cfd87ecd991d8fe55807cec6628b92ba698844a24ba58e
Details sha256 2 
f02cf38d417fc6e3d5f9fc05ebf49ca37e6106ffc62ce21145888338598e0c70
Details sha256 1 
102679330f1e2cbf41885935ceeb2ab6596dae82925deec1aff3d90277ef6c8c
Details sha256 1 
32eb4b7a4d612fac62e93003811e88fbc01b64281942c25f2af2a0c63cdbe7fa
Details sha256 1 
5c5c5b25b51450a050f4b91cd2705c8242b0cfc1a0eaeb4149354dbb07979b83
Details sha256 1 
7509761560866a2f7496eb113954ae221f31bc908ffcbacad52b61346880d9f3
Details sha256 1 
924ec909e74a1d973d607e3ba1105a17e4337bd9a1c59ed5f9d3b4c25478fe11
Details sha256 1 
ac49a9ecd0932faea3659d34818a8ed4c48f40967c2f0988eeda7eb089ad93ca
Details sha256 1 
fc8668f6097560f79cea17cd60b868db581e51644b84f5ad71ba85c00f956225
Details sha256 1 
ffa0420c10f3d0ffd92db0091304f6ed60a267f747f4420191b5bfe7f4a513a9
Details sha256 1 
472836ed669d3927d50055e801048696375b37fce03b2f046e3e1039fb88e048
Details sha256 1 
dc3d08480f5e18062a0643f9c4319e5c3f55a2e7e93cd8eddd5e0c02634df7cf
Details sha256 1 
052716d193fc11c2f0deb67e35e580db335368d53cdd486f9cb1598c7021be8e
Details sha256 1 
2f31962c5e89917f6df87babd836840042b7ea7ea01763cff1bf645878a2ab47
Details sha256 1 
719e1e9289c78ed9ee5000bffdd26bc2a4473f966091e321919e333d81e8b1e6
Details sha256 1 
624188b7b839afe83d2cc6593448b73e94c40085671f967846ac3901c9f75249
Details sha256 1 
6a6c3a6eec55a1ec47badd05d6cfe6b4f8680c7f7bc6ee571c330a5b1ffdbc3a
Details sha256 1 
a0b36376ab6c54540d10e5d549049622096d121abec6f760e0452a535c1675f3
Details sha256 6 
3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79
Details sha256 1 
0be6f1e927f973df35dad6fc661048236d46879ad59f824233d757ec6e722bde
Details Url 1 
http://lockbitapt[redacted].onion
Details Url 1 
http://lockbitapt[redacted].onion.ly
Details Url 1 
http://lockbitap[redacted].onion.ly
Details Url 1 
https://twitter.com/hashtag
Details Url 63 
https://www.torproject.org
Details Url 1 
http://lockbitsup[redacted].onion
Details Url 1 
http://lockbitsupt[redacted].onion
Details Url 1 
https://en.wikipedia.org/wiki/general_data_protection_regulation
Details Url 1 
https://gdpr.eu/what-is-gdpr
Details Url 4 
https://gdpr-info.eu