Keyword: lockbit
2 Total Search   |   Showing Results : 1 - 2
   Next  
following registry entries: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Run XO1XADpO01 = "{drive letter of original full filepath}" HKEY_CURRENT_USER\Software\LockBit full = {hex value}
\v2.0.50727\vbc.exe" HKEY_CURRENT_USER\Software\LockBit full = {Binary data} HKEY_CURRENT_USER\Software\LockBit Public = {Binary data} Process Termination This Ransomware terminates processes or services that