logo

Unmasking the Darkrace Ransomware Gang

ID: ac8b3d29-5a87-5150-9641-fd59168e40e9

STIX ID: report--ac8b3d29-5a87-5150-9641-fd59168e40e9

Feed Name: Cyble Blog

Threat Score
70/100

Date Published: 2023-06-14

Date Updated: 2026-07-17

...
...

Darkrace is a newly observed Windows-targeting ransomware similar to LockBit that encrypts files (appending a randomized extension), deletes shadow copies, stops backup/database services, drops a ransom note linking to a leak site and uses double-extortion; the report provides detailed technical indicators (SHA256/MD5/SHA1 samples, mutex name, whitelists, dropped 1.bat and icon), MITRE ATT&CK mappings, and recommended mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.