oalabs
patreon
Live Stream VOD: Lockbit 3.0 Ransomware Triage - Part 2
🕑 Added 2022-07-12 05:30:00 +0000 UTCFixing Our Config Extractor
In this twitch stream we continue our analysis of the new Lockbit 3.0 ransomware and complete our config extractor. We extract the ransom note along with many encrypted strings, and some shell code ... and curiously... three embedded PE files!
Sample
80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce
Notes (with code)
Lockbit 3.0 Ransomware Triage - Encrypted Strings
