Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
3 IOCs

Technical Analysis of Lockbit4.0 Evasion Tales

0x0d4y Malware Research
0x0d4y Malware Research
Published February 19, 2025Original Report

Threat Actors

Malware Families

Excerpt

The Ransomware-as-a-Service ( RaaS ) group Lockbit is the main pillar of this Ransomware business model, largely due to its strong commitment to the development of its product, producing Ransomware with implementations that are up to date on the date of each release. The Lockbit4.0 (or Lockbit Green ) version is no different, as it is a major update, especially in the Evasion and Obfuscation layer. In this research, I will analyze the main Obfuscation and Evasion capabilities…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYLockBitREvilINFRASTRUCTUREunknownCAPABILITYLockBitMETA StealerREvilVICTIMunknown
Adversary(2)
Infrastructure
Capability(3)
Victim

Indicators of Compromise

Open the mindmap →

3 indicators

TypeIndicatorConfidenceScoreFirst Seen
MD515796971d60f9d71ad162060f0f76a02MediumScore 55/100First seen
MD5062311f136d83f64497fd81297360cd4MediumScore 55/100First seen
SHA25621e51ee7ba87cd60f692628292e221c17286df1c39e36410e7a0ae77df0f6b4bMediumScore 55/100First seen

IOC Relationship Graph

Building graph…