Unmasking the Darkrace Ransomware Gang
ID: ac8b3d29-5a87-5150-9641-fd59168e40e9
STIX ID: report--ac8b3d29-5a87-5150-9641-fd59168e40e9
Feed Name: Cyble Blog
Threat Score
Darkrace is a newly observed Windows-targeting ransomware similar to LockBit that encrypts files (appending a randomized extension), deletes shadow copies, stops backup/database services, drops a ransom note linking to a leak site and uses double-extortion; the report provides detailed technical indicators (SHA256/MD5/SHA1 samples, mutex name, whitelists, dropped 1.bat and icon), MITRE ATT&CK mappings, and recommended mitigations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
