2025-01-27 (Back to Inventory)

Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

Author(s): MittenSec, MyDFIR, r3nzsec
Organization: The DFIR Report
win.ghostsocks win.lockbit win.systembc

Open article directly   Open article on Archive.org  

Related Articles

2024-09-30The DFIR ReportThe DFIR Report
Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware
BlackCat Nitrogen Loader Sliver
2024-08-26The DFIR ReportThe DFIR Report
BlackSuit Ransomware
BlackSuit Cobalt Strike SystemBC
2024-04-29The DFIR ReportThe DFIR Report
From IcedID to Dagon Locker Ransomware in 29 Days
IcedID Mount Locker