YARA · RussianPanda
RUSSIANPANDA_Win_Ransom_Lockbit5
Detects LockBit 5.0
- Author
- RussianPanda
- Date
- 2025-09-15
- Score / Quality
- 75 / 85
What this rule detects
Detects LockBit 5.0
Associated malware family: Lockbit.
Targets: Windows PE.
It defines 3 patterns (0 text, 3 hex, 0 regex).
Summary generated from the rule's metadata and condition.
Rule source
Rule text not reproduced
This rule comes from RussianPanda, which does not grant a licence to redistribute its rules (No licence (all rights reserved)). We show its metadata only. Read the original rule upstream:
Sample hashes
Hashes of samples the author lists in the rule's meta (look them up in your threat-intelligence platform).
- 7ea5afbc166c4e23498aa9747be81ceaf8dad90b8daa07a6e4644dc7c2277b82
Licence & attribution
Author: RussianPanda
Source repository: RussianPanda @ acb504b67b
Licence: No licence (all rights reserved) (repository licence)
Mirrored via YARA Forge 20260927, which prefixes rule names with the source and adds normalised meta fields.
Rule id: bfe66503-fdd1-5a9a-9509-5b97efaabd9b
Tags:FILE
Related rules
- MalwareSignature Base (Florian Roth / Nextron)· 0x0d4y· 2024-02-16
- MalwareSignature Base (Florian Roth / Nextron)· 0x0d4y· 2024-02-16
- MalwareSignature Base (Florian Roth / Nextron)· 0x0d4y· 2024-02-13
- MalwareSignature Base (Florian Roth / Nextron)· Florian Roth· 2023-04-15
- MalwareSignature Base (Florian Roth / Nextron)· X__Junior· 2023-11-23
- MalwareSignature Base (Florian Roth / Nextron)· X__Junior· 2023-11-23
- MalwareSignature Base (Florian Roth / Nextron)· X__Junior· 2023-11-23
- MalwareSignature Base (Florian Roth / Nextron)· X__Junior· 2023-11-23