# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/) # See the file 'LICENSE' for copying permission # Reference: https://twitter.com/bartblaze/status/1228364607410130944 # Reference: https://twitter.com/GrujaRS/status/1294908674486525953 # Reference: https://github.com/StrangerealIntel/malware-notes/blob/master/Ransomware/Lockbit.md lockbit-decryptor.com lockbitkodidilol.onion lockbitks2tvnmwk.onion # Reference: https://www.virustotal.com/gui/ip-address/47.91.79.68/relations lockbit-blog.com lockbit-decryptor.top # Reference: https://github.com/thetanz/ransomwatch/blob/main/docs/INDEX.md # Reference: https://www.virustotal.com/gui/ip-address/37.75.37.31/relations lockbitapt.uz lockbitsupp.uz lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion # Reference: https://www.ic3.gov/Media/News/2022/220204.pdf (# Lockbit 2.0) http://139.60.160.200 http://168.100.11.72 http://174.138.62.35 http://185.182.193.120 http://185.215.113.39 http://193.162.143.218 http://193.38.235.234 http://45.227.255.190 http://88.80.147.102 http://93.190.139.223 http://93.190.143.101 # Reference: https://unit42.paloaltonetworks.com/emerging-ransomware-groups/ # Reference: https://otx.alienvault.com/pulse/612606e65f3918cb8354bcd9/ bigblog.at decoding.at # Reference: https://www.sentinelone.com/labs/lockbit-ransomware-side-loads-cobalt-strike-beacon-with-legitimate-vmware-utility/ # Reference: https://otx.alienvault.com/pulse/626bc047f1a3ebc6be0a2856 45.32.108.54:443 # Reference: https://twitter.com/malwrhunterteam/status/1521942395679608834 # Reference: https://www.virustotal.com/gui/file/7cc0c4d1f3bc3c5e486077bd69c1aeedba27a085c5e6f67d7309f2aa79a0e5b9/detection lockbitsap2oaqhcun3syvbqt6n5nzt7fqosc6jdlmsfleu3ka4k2did.onion lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion # Reference: https://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques/ # Reference: https://otx.alienvault.com/pulse/62da7bf8750a63befc1fdc10 lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion lockbit7z2mmiz3ryxafn5kapbvbbiywsxwovasfkgf5dqqp5kxlajad.onion lockbit7z2og4jlsmdy7dzty3g42eu3gh2sx2b6ywtvhrjtss7li4fyd.onion lockbit7z355oalq4hiy5p7de64l6rsqutwlvydqje56uvevcc57r6qd.onion lockbit7z36ynytxwjzuoao46ck7b3753gpedary3qvuizn3iczhe4id.onion lockbit7z37ntefjdbjextn6tmdkry4j546ejnru5cejeguitiopvhad.onion lockbit7z3azdoxdpqxzliszutufbc2fldagztdu47xyucp25p4xtqad.onion lockbit7z3ddvg5vuez2vznt73ljqgwx5tnuqaa2ye7lns742yiv2zyd.onion lockbit7z3hv7ev5knxbrhsvv2mmu2rddwqizdz4vwfvxt5izrq6zqqd.onion lockbit7z3ujnkhxwahhjduh5me2updvzxewhhc5qvk2snxezoi5drad.onion lockbit7z4bsm63m3dagp5xglyacr4z4bwytkvkkwtn6enmuo5fi5iyd.onion lockbit7z4cgxvictidwfxpuiov4scdw34nxotmbdjyxpkvkg34mykyd.onion lockbit7z4k5zer5fbqi2vdq5sx2vuggatwyqvoodrkhubxftyrvncid.onion lockbit7z4ndl6thsct34yd47jrzdkpnfg3acfvpacuccb45pnars2ad.onion lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion # Reference: https://www.sentinelone.com/blog/living-off-windows-defender-lockbit-ransomware-sideloads-cobalt-strike-through-microsoft-security-tool/ # Reference: https://otx.alienvault.com/pulse/62e3bd0e3cb19a3fe6ea6e03 # Reference: https://www.virustotal.com/gui/file/5fa490668a9963e97d956f9a3b0c746b1d16eee9a73dfba875c9a3dc0e2c0d1b/detection # Reference: https://www.virustotal.com/gui/file/5f614a8e35bd80a603cf98846c6a44030ad18bed45ac83bd2110d83e8a090de4/detection 139.180.184.147:45532 openjdklab.xyz info.openjdklab.xyz # Reference: https://asec.ahnlab.com/en/39242/ # Reference: https://otx.alienvault.com/pulse/633dcf3971af0a0dae3243b7 ppaauuaa11232.cc # Reference: https://twitter.com/DmitriyMelikov/status/1602239777029476354 # Reference: https://www.virustotal.com/gui/file/3b55624bf812c25712465543d5c0d687f523d3a93f6879817cef93dffef20888/detection # Reference: https://www.virustotal.com/gui/file/e6ab1b1a253a608785f765d5961694215b39e58ca29e70c5cb3c1ba7a0a1100b/detection http://195.201.101.146 /12341rgergg435g4tr.exe /o19wzg.dotm # Reference: https://blogs.blackberry.com/en/2023/02/darkbit-ransomware-targets-israel # Reference: https://otx.alienvault.com/pulse/63ee2eedd11d67c4a0381cb1 iw6v2p3cruy7tqfup3yl4dgt4pfibfa3ai4zgnu5df2q3hus3lm7c7ad.onion # Reference: https://www.fortinet.com/blog/threat-research/emerging-lockbit-campaign # Reference: https://otx.alienvault.com/pulse/6401fd791fe902ee4ade8711 lockbit3hc6syym13ki2ag5jskr6q5qa3spspjpmtfhh6fufut737zid.onion lockbit3jx6je7tm6hhm6zzafgy6hpil3ur6jmc2a4ugan7xzztv6oqd.onion lockbitdvbpfczc3yrs37kpp6avnrgr7yygi2f45qxvef2yqi36lpxyd.onion lockbitov3afmxgknfhk2o5d4uqrhygd7ty3xqm56qd6zjlu6u43pgyd.onion poliovocalist.com # Reference: https://twitter.com/ViriBack/status/1688196757908324352 # Reference: https://app.any.run/tasks/f8631874-112f-4814-b254-8aeede48c829/ 23.92.208.51:8080 # Reference: https://twitter.com/AlvieriD/status/1709558046169477536 lockbitnotexk2vnf2q2zwjefslhjsnk4u74vq4chxrqpjclfydk4ad.onion # Reference: https://twitter.com/seguridadyredes/status/1717220865522245837 http://104.237.255.254 http://167.172.239.68 http://185.202.2.121 http://51.15.18.180 http://51.89.134.150 http://52.237.96.13 http://54.38.212.197 http://62.76.112.121 http://82.102.20.219 http://82.202.247.81 tinneatonenessnabobical.com # Reference: https://twitter.com/MaxRogers5/status/1727115513468469715 # Reference: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-325a # Reference: https://otx.alienvault.com/pulse/655de81a14bc690453688560 http://62.233.50.25 http://81.19.135.219 81.19.135.219:443 adobe-us-updatefiles.digital unattended.techninline.net # Reference: https://twitter.com/noexceptcpp/status/1734309296245026843 # Reference: https://twitter.com/noexceptcpp/status/1734309296245026843 http://142.171.8.34 http://173.82.106.20 /LockBit30.7z /LockBit3Builder.7z # Reference: https://twitter.com/banthisguy9349/status/1735226147154112676 http://142.171.8.34 /LockBit-Black-Builder # Reference: https://twitter.com/malwrhunterteam/status/1737977329782059408 # Reference: https://www.virustotal.com/gui/file/33af82d0be509833db69893a043da367d7dae216f6b61d96e542ca4546805d7a/detection lockbitapt280e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce.onion # Reference: https://25491742.fs1.hubspotusercontent-eu1.net/hubfs/25491742/WAZAWAKA_TLPCLEAR_Report.pdf # Reference: https://www.virustotal.com/gui/file/a7097aa81d7ded0ba011e056f16b50549801bf4001ad11f20e071b05e7172fac/detection # Reference: https://www.virustotal.com/gui/file/855720fe77e8a762c59c77a5067ae8c6a6ad12e658073776529e8404ba16f5dd/detection # Reference: https://www.virustotal.com/gui/file/2459b0ee1091a6e4232da6ae7fe587d81dd24e521f7fd1fc8c2a89c40f78740e/detection # Reference: https://www.virustotal.com/gui/file/0161731f8500ac724469b01a5f8f2695279cbf05bcad4b3586b090e6a89fdc87/detection 81.17.29.165:443 # Reference: https://twitter.com/DmitriyMelikov/status/1740472757236998293 # Reference: https://www.virustotal.com/gui/file/f7729a917edefcaabe7545738fb1097ba83e99829dd7a4dc1b1c609da725a0b1/detection neverlandserver.nn.pe lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion.ly lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion.ly lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion.ly lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion.ly lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion.ly lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion.ly lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion.ly lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion.ly lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion.ly # Reference: https://twitter.com/RakeshKrish12/status/1740634433873743965 # Reference: https://www.virustotal.com/gui/ip-address/77.222.57.185/relations help8888.top # Reference: https://twitter.com/doc_guard/status/1740748988897243421 # Reference: https://app.docguard.io/957baea98c48a7e8f620b6ad869113eacbc4f14c73e03bf5f9dbc75881e22aed/results/dashboard # Reference: https://www.virustotal.com/gui/file/957baea98c48a7e8f620b6ad869113eacbc4f14c73e03bf5f9dbc75881e22aed/detection viviendas8.com # Reference: https://twitter.com/RakeshKrish12/status/1758029854170329127 # Reference: https://twitter.com/Intel_Ops_io/status/1758113329472520497 # Reference: https://urlscan.io/result/07e695eb-629a-4178-bc93-efbbdbe0fd05/ http://165.227.85.87 http://5.182.5.126 disposessor.com dispossessor.com dispossessor-cloud.com radar.ltd twitter3e4tixl4xyajtrzo62zg5vztmjuricljdp2c5kshju4avyoid.onion # Reference: https://www.virustotal.com/gui/file/bfa1a2bd23754277ee1f31e80c92d9c5309f150083451bfc33bbeb604adec8f6/detection lockbitaptoofrpignlz6dt2wqqc5z3a4evjevoa3eqdfcntxad5lmyd.onion.ly lockbitccip4ykyd.onion # Reference: https://app.validin.com/detail?type=raw&find=LockBit+BLOG#tab=host_pairs http://188.119.67.179 http://193.37.69.163 http://31.41.44.160 http://5.188.88.239 nampakdata.org # Reference: https://x.com/AlvieriD/status/1805074447130636320 ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion # Reference: https://x.com/DarkWebInformer/status/1805701492139073841 lockbit33chewwx25efq6dgkhkw4u7nefudq4ijkuamjfd7x73on6dyd.onion # Reference: https://x.com/AlvieriD/status/1812796871649219056 lockbitw2ygzasbt35ffpdb46r4vkej6flm3siyabaxzdodwpiatfgqd.onion # Reference: https://x.com/RakeshKrish12/status/1813098856143593684 lockbitcuo23q7qrymbk6dsp2sadltspjvjxgcyp4elbnbr6tcnwq7qd.onion lockbitm7sccjc7254x3lpunyobnaiw2gnkptev2ygipifguf3r7spyd.onion lockbitw5gfwjv23v5ytupbpdnc2ei5nqyhnnpoyme2ohqs6tc7jehad.onion # Reference: https://x.com/RakeshKrish12/status/1813098858802737636 lockbit23xxhej7swdop24cru7ks2w66pw7zgdkydqo6f7wfyfqo7oqd.onion lockbit7ixelt7gn3ynrs3dgqtsom6x6sd2ope4di7bu6e6exyhazeyd.onion lockbitck6escin3p33v3f5uef3mr5fx335oyqon2uqoyxuraieuhiqd.onion lockbitfhzimjqx2v7p2vfu57fpdm5zh2vsbfk5jkjod3k5pszbek7ad.onion lockbiti7ss2wzyizvyr2x46krnezl4xjeianvupnvazhbqtz32auqqd.onion lockbitkwkmhfb2zr3ngduaa6sd6munslzkbtqhn5ifmwqml4sl7znad.onion lockbitqfj7mmhrfa7lznj47ogknqanskj7hyk2vistn2ju5ufrhbpyd.onion # Reference: https://x.com/AlvieriD/status/1817127275671806170 lockbit3hdu7e4sv3ecg6mmqmeihjcizebcxic6t4eqwar6f2e7rxpad.onion lockbit4r3ly63w22jhkg33emtqwxw436wkftosscvdal2prdlwzknyd.onion lockbit7bb4b6n27feok2rc7ri75udaqkfppjvtkxlwh7qldygbopmad.onion lockbit7xn7nqc5f5gfhv6qrf46xh65lscuzctwnmomthcigu2m3tad.onion lockbitb63zs7f4rdjcsn2etkqaswurk6hh55sa2ojeilxcnwf6qbkqd.onion lockbitbtdk33k75rsl6uhn6bewd5g6z3hp42z6vb2hfk54oja55h7id.onion lockbitbvcwegcbou4fulv3iy3bpwh2do3y243w2riwbgcdp|3hd3uyd.onion lockbitdzjxsgyacnmfte6nfgqfcyhedkduimi4tsajvrwi4ljbos7id.onion lockbitehorki5kh6s3n27hi3serhzr7htlshfqyg5ex32dyr5efhfyd.onion lockbitffcjqi2wpwhjgubkjihhc7seaujqgzscvwvdiftunl6hn5oyd.onion # Reference: https://x.com/AlvieriD/status/1818615301283680270 lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43f00cwmrzsokumqid.onion lbb47q2f7nzeatj6mxppuk7bhnvwu23mf6pfuywxcz57dwnzl6z3ksqd.onion lbb6ud2vyf23z4hw6fzskr5gru7eftbjfbd6yzra3hzuqqvjy63blqqd.onion lbbchnkrhkjtltjunmqsbw32bbblsd5bd2pqywtt2bex4bjmosry2iqd.onion lbbellr6aq4kuchzy44pmimszfd4di4fslez765ux4kse304lxcnpgid.onion lbbfsazjqqwvtq2ckhm53kfmvsy7c6sdci3uy6qui4lv66aeef7hhpad.onion lbbgv7wsi6bpguvjbu60mdgwzllomstvd065d02q7vw4er7aqrnmtad.onion lbbjmbkvw3yurmnazwkbjsmuyvw5dd6y7hyxrus23y33qiqczclrnbyd.onion lbbk5lfftmhhu2qtahhg4wpnxw4bmtzoy5mu7g4jwyfyeyq0e3vpl4yd.onion lbbov7weoojwnqytnjqygmglkwtimsdvyw3xvoluksostz750fd6enqd.onion lbbp0q6d2jglpw7dxarr60aakgnlxt5nmrza50jlufsuffuzexajsuyd.onion lbbp2rsfcmg5durpwgs22wxrdngsa4wiwmc4xk6hgmuluy6bvbvvtlid.onion lbbscnqexve2wg6acbfyohkzeijflpqmgijx5ksyvu4aljv27r2lgiid.onion lbbux057hyskobn5xwtw26rk04wyvttory6k7pio2lv5adeopeezv6ad.onion lbbvhambmcts4rpf2b65mrnqynhpn4hksq47i02wowscjtv3xmsypid.onion lbbw60p2te2f323ltn2fgwl5tuscr3udoj3ik20bdtr5367skuh4cid.onion lbbw7j6si6k2bzxd4tzvesoufjtr4pa6awqie63rmkpql7hmu6tqnqd.onion lbbxv6nlojheut6th4nqwpabr4gtksmy7f4c52ubvvvumydpo4dmry.onion lbbzlychkbilhjswshhuvk7zk4axdffy3nvel3zaqwnu02d4nlookeyd.onion lbbzme4ctvcgzo5lq7jvcdy2v2cs6hrlgihsmylfddprzqptm6ywhhyd.onion # Reference: https://x.com/arch1ehic0x/status/1832397429921989108 # Reference: https://www.virustotal.com/gui/file/d14a3a7f9d7a5eeecd1aa169d2954a1ec318efb91281d3bac4756174b41742d6/detection # Reference: https://www.virustotal.com/gui/file/c38bbb635cfe79bb7c5d1ce8be0138c670663f1402c87c83a2bdb1f913c89a9d/detection # Reference: https://www.virustotal.com/gui/file/5594af688574f12255e766e9be7e3e82d5295ad133b7a30465d3cc66ea78a57a/detection # Reference: https://www.virustotal.com/gui/file/556c75aebff8ff9ceafeb223f15f64dda6db7457ba60495d743254ccfc94ecf3/detection # Reference: https://www.virustotal.com/gui/file/3a10175e0093afb8d2a1ddffca7c95199352e31402b279f37fa9f735e154a0e2/detection 176.111.174.64:9999 # Reference: https://x.com/ShanHolo/status/1835258665453883727 # Reference: https://www.virustotal.com/gui/file/105912c9995a1d718c5442349d2cc4bb99426f75ff34554cdfd9a7272eeca398/detection 119.28.78.133:9001 # Reference: https://x.com/t43cr0wl3r/status/1807499156124311649 # Reference: https://app.validin.com/detail?find=Lockbit%203.0%20-%20Pay%20or%20die!%20&type=raw&ref_id=27a7927ffd9#tab=host_pairs_v2 http://5.78.121.251 static.251.121.78.5.clients.your-server.de # Reference: https://x.com/TLP_R3D/status/1851192631486779631 # Reference: https://www.virustotal.com/gui/ip-address/185.17.40.178/community http://185.17.40.178 185.17.40.178:443 # Reference: https://github.com/marktsec/Ransomware_Official_Domains?tab=readme-ov-file#lockbit3 lbb2llze7ab4rnq4jumsy4ihsqzpuysaofpz2e43foocwmrzsokumqid.onion # Reference: https://www.thedfirspot.com/general-8-1 e27z5kd2rjsern2gpgukhcioysqlfquxgf7rxpvcwepxl4lfc736piyd.onion # Reference: https://www.thedfirspot.com/general-8-1 lbb5cnqexve2wg6acbfyohkzeijflpqmgijx5ksyvu4aljv27r2lgiid.onion lbbchnkrhkjtltjunmqsbw32bbblsd5bd2pqywtt2bex4bjmo5ry2iqd.onion lbbellr6aq4kuchzy44pmimszfd4di4fslez765ux4kse3o4lxcnpgid.onion lbbgv7wsi6bpguvjbu6omdgwzllqm5tvdo65do2q7vw4er7aqrnjmtad.onion lbbjmbkvw3yurmnazwkbj5muyvw5dd6y7hyxrus23y33qiqczclrnbyd.onion lbbk5lfftmhhu2qtahhg4wpnxw4bmtzoy5mu7g4jwyfyeyqoe3vpl4yd.onion lbbov7weoojwnqytnjqygmglkwtim5dvyw3xvoluk5ostz75ofd6enqd.onion lbbpoq6d2jglpw7dxarr6oaakgnlxt5nmrza5ojlufsuffuzexajsuyd.onion lbbuxq57hyskobn5xwtw26rkq4wyvttory6k7pio2lv5adeopeezv6ad.onion lbbvhambmct5s4rpf2b65mrnqynhpn4hksq47io2wow5cjtv3xmsypid.onion lbbw6uqp2te2f323ltn2fgwl5tu5cr3udoj3ik2obdtr5367skuh4cid.onion lbbw7j6si6k2bzxd4tzvesoijfjtr4pa6awqie63rmkpql7hmu6tqnqd.onion lbbxv6nlojheut6th4nqwpabr4gtksm7y7f4c52ubvvvumydpo4dmryd.onion lbbzlychkbilhjsw5hhuvk7zk4axdffy3nvel3zaqwnuo2d4nlqqkeyd.onion # Reference: https://x.com/9823f_/status/1869833016912294088 lockbit.site lockbit.world # Reference: https://x.com/DailyRansomware/status/1869566978853060691 lockbit4.com # Reference: https://x.com/RakeshKrish12/status/1871154301990826334 # Reference: https://theravenfile.com/2024/06/26/the-return-of-lockbit/ # Reference: https://github.com/TheRavenFile/Daily-Hunt/blob/main/LockBit%204.0%20Ransomware # Reference: https://www.virustotal.com/gui/file/2f5051217414f6e465f4c9ad0f59c3920efe8ff11ba8e778919bac8bd53d915c/detection # Reference: https://www.virustotal.com/gui/file/563cd800e80253a7051ea8a1bd690d123cf7820c355addeeaaabaa227984d9cb/detection # Reference: https://www.virustotal.com/gui/file/20dd91f589ea77b84c8ed0f67bce837d1f4d7688e56754e709d467db0bea03c9/detection # Reference: https://www.virustotal.com/gui/file/2600f61f3f7a553cb7c5ac6d2997d6359bf6b276a1ecead8aa30f1a2c35cffe3/detection # Reference: https://www.virustotal.com/gui/file/a33f21d28bd83a9501257ee727c46486989bdfea6d5cb9f1c12c9a67296b21b1/detection # Reference: https://www.virustotal.com/gui/file/36f48ef3776c01d63a2fd594d52dfb7402ea634162fd079b0d942367a2fbed56/detection # Reference: https://www.virustotal.com/gui/file/d9e7a01521d956c5ef3e07153209be63da738eee98902050c06424292d7b1387/detection # Reference: https://www.virustotal.com/gui/file/dc498e513d71c81a2d5bcd0f39c44d474457342b8a6de203e85d6b8350d8a247/detection # Reference: https://www.virustotal.com/gui/file/0c516038b8f216fb87ebc0d4335fff4013c9b2a80c682069071ec9ae9e2005e9/detection # Reference: https://www.virustotal.com/gui/file/82d89a75d80e80e4be42c9eb79e401558c9fa3175648cd0c0467f2de1a07a908/detection # Reference: https://www.virustotal.com/gui/file/6adb8f7da4d7ff92c40f0f8231c7469865b170b440be5f2789724a2abe005b30/detection # Reference: https://www.virustotal.com/gui/file/69487c2f91495cfda293735fc01ac8d516b48359171e3b53581ccf3145bfb527/detection f4rvfhafewlxbn6scqgllbj6zmdno4rekzn5drpuh5ewipjzzt3ejcqd.onion fmtvvg3x5rs7tagzcytmfmffnihnte6gllkljufyz534hfpqhfyg2dad.onion ll6e7r3amddyzq6t72rce6q6frdv7pi3xualapqkyppvcohhvjoynnad.onion ll7wsjnsv23csjgaeyqjzoo6s2mhswo7ezzwyqrqbtqz6zzv4lykovqd.onion llbbmmr6kgohzmiuz7h6dey5effla5d2u36xre4teh5rh2s5jmdrllyd.onion llexwrk5mcbgndt4hsni42fp76d63j2csmgrjxbk2j7yui6eov7fh2qd.onion llhsnvqxz5i5jkvebb2nt4l77l5cu4hd5jhpjlkj5n7ramr2z6g4kzyd.onion lli46m2hkhiwcpbncbhlfhfh7524joc5pa66vqajgxt4vrgszwgqlhyd.onion llledlqn23uj5iothae52jvmwohytz74kn6atcjlqx6tfjwt53slf4id.onion llnaqhmhysmohdiknr5tsv4vp7enbqgtjxadtrzu5mzhmdquqx7iwrqd.onion llt5emrxc3h5bm6gyx2dhos2byixahhyowf3wdayan3bajmlx2etqcad.onion lly4dbpmlg4lgsua37sqn3mdocstjuqnvdtzv7fkz7sfsfu56xahd7yd.onion lockbit24pegjquuwbmwjlvyivmyaujf33kvlepcxyncnugm3zw73myd.onion lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion lockbit7z55tuwaflw2c7torcryobdvhkcgvivhflyndyvcrexafssad.onion lockbit7z5ehshj6gzpetw5kso3onts6ty7wrnneya5u4aj3vzkeoaqd.onion lockbit7z5hwf6ywfuzipoa42tjlmal3x5suuccngsamsgklww2xgyqd.onion lockbit7z6choojah4ipvdpzzfzxxchjbecnmtn4povk6ifdvx2dpnid.onion lockbit7z6dqziutocr43onmvpth32njp4abfocfauk2belljjpobxyd.onion lockbit7z6f3gu6rjvrysn5gjbsqj3hk3bvsg64ns6pjldqr2xhvhsyd.onion lockbit7z6qinyhhmibvycu5kwmcvgrbpvtztkvvmdce5zwtucaeyrqd.onion lockbit7z6rzyojiye437jp744d4uwtff7aq7df7gh2jvwqtv525c4yd.onion lockbitapiahy43zttdhslabjvx4q6k24xx7r33qtcvwqehmnnqxy3yd.onion lockbitapo3wkqddx2ka7t45hejurybzzjpos4cpeliudgv35kkizrid.onion lockbitapp24bvbi43n3qmtfcasf2veaeagjxatgbwtxnsh5w32mljad.onion lockbitapyum2wks2lbcnrovcgxj7ne3ua7hhcmshh3s3ajtpookohqd.onion lockbitapyx2kr5b7ma7qn6ziwqgbrij2czhcbojuxmgnwpkgv2yx2yd.onion lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion lockbitsptqsmaf56cmo7bieqwh5htlsfkodpahsaurxlquoz67zwrad.onion lockbitspudgjptrzadjzi7b4n2nw3yq6aqqqqw6wbrrjkr2ffuhkhyd.onion lockbitspxgtf65ej7uu5h7qtephbevcsc2sk2brxzmt754etrrzhdqd.onion lockbitspxmqqfi6bw4y7f5psnpoaakhlisdx33busmnpgtimart5fad.onion lockbitspyakyequybgwgwauhzqxx7ba2gh3lmlj3zyeuaknrexdzfid.onion # Reference: https://x.com/solostalking/status/1875820982109401414 lockbit.tac-tic.info # Reference: https://x.com/RakeshKrish12/status/1962414112958456199 # Reference: https://raw.githubusercontent.com/TheRavenFile/Daily-Hunt/refs/heads/main/LockBit%204.0%20Ransomware 114.230.238.45:30238 117.213.29.126:30196 182.38.67.20:3190 182.38.67.20:4107 186.120.102.250:30211 191.96.150.125:1238 191.96.150.125:2857 194.166.99.94:19503 31.200.249.146:31860 31.200.249.178:31882 31.200.249.187:31862 31.200.249.187:31863 31.200.249.227:31883 31.200.249.231:31886 31.200.249.233:31849 31.200.249.233:31885 31.200.249.237:31884 lockbit7tnu7whmaqnnlmvnoxzejssvr6vkcoovg35encvnp24pikvyd.onion lockbitdx4kanolaotenc3nmonlxv5enmhxdh2lk54rirvcdsljfbjyd.onion lockbitf75dfwq4bsec3iaytf6z5z6dmstx3g35grn74ndxy3py2ozyd.onion lockbithn5a2qgf4ojvut3q25yylrauvjxrz6sjdd4teas65osru2lqd.onion lockbitjqfuyrkxiie6bcly6ow4sh6lmyuyvyats5hcpe5e6hbuhikyd.onion lockbitkybiqhyv64vdaamz7uf2ymjoafyalx3e6spmmsz5xyk5nbcad.onion lockbitnpobu6luzzlxb7br5uyqnmeruwimpjuw2kv442nvxd6sufsad.onion lockbity3v2rhjjjt6opcgvdrrlvdbrt3p2wqmxmq4cm36cchphdy6qd.onion lockbityq64mwtobqqcr3iwxs5q4o7iliuv72gbx4vflggj4m4wqekad.onion # Reference: https://x.com/DarkWebInformer/status/1964055630500565168 lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion # Reference: https://x.com/ShanHolo/status/1967518112967975332 lockbitapt67g6rwzjbcxnww5efpg4qok6vpfeth7wx3okj52ks4wtad.onion lockbitsuppyx2jegaoyiw44ica5vdho63m5ijjlmfb7omq3tfr3qhyd.onion # Reference: https://x.com/AlvieriD/status/1992604792292561397 xowngdkhjl3sh5becyfohd5xaxbcy2i5qkpsjhnivj5l.onion test.xowngdkhjl3sh5becyfohd5xaxbcy2i5qkpsjhnivj5l.onion # Reference: https://x.com/RakeshKrish12/status/1997122573512200668 http://205.185.116.233 karma0.xyz # Reference: https://theravenfile.com/2024/06/26/the-return-of-lockbit/ # Reference: https://www.virustotal.com/gui/file/011f9202d7bfa7fe1f34096ada2e554c1cf4aa85c2138e9f59a0f214eea4fb33/detection # Reference: https://www.virustotal.com/gui/file/003427b9d6b9cc6dbbb458bd5fa0a1672fdede7aacaa71f4488053fec78eb8cd/detection # Reference: https://www.virustotal.com/gui/file/003427b9d6b9cc6dbbb458bd5fa0a1672fdede7aacaa71f4488053fec78eb8cd/detection http://185.191.59.69 185.183.34.95:6890 31.200.249.130:31818 31.200.249.162:31850 3bqptmf5ergw7mgj6jalvn5ohh2ubhssestvrwfdoubaz7nkrix4jcqd.onion lockbit2zfxali5yrplh5swimxva5o4xqi3zpbc24tczgffxh7msrvyd.onion lockbit3m6lgexvokfxyqcdnykdvhye7aftic6p4uh7mnz42h25ooiid.onion lockbit7gtvdkx7j3tyfpw43zv6majh2owrsp3zilhpm36a3fldqtyqd.onion lockbit7z57mkicfkuq44j6yrpu5finwvjllczkkp2uvdedsdonjztyd.onion lockbit7z5ltrhzv46lsg447o3cx2637dloc3qt4ugd3gr2xdkkkeayd.onion lockbitabmbzz652qeqd7yztgugcihpy4s4f6zuqi3jx32rzjylsn7ad.onion lockbitbgtyqtgutvasrld5gx23ozo32y4xkjrby6bte3zyvjdlyoxyd.onion lockbitbuy3gsqwrgavmi3ehlmk26h6g3aeyslnq4yksjcbpt6ij5cqd.onion lockbitdzdbv5dh6ncf65c22tdgej72sty6ikiieuinibh6icnzrv4yd.onion lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion lockbitfilzhrvt6eya2lvnp7te4iifzmwybendqclgujqbzu3k4gaid.onion lockbitfilzu5e62fybhieutf6653cpv6wco7twgjtkqwdgubn4q5rad.onion lockbitfnszjao7hayqsd424m74k5jxc52hozvabjrut7pjfsfaaaoad.onion lockbitgf43c7avhx5wesx5ambjgbormhwc2tujsy6lvg6drkjhnjryd.onion lockbitjvv72zmzgcqgn63ehjaapffubbwjwi32gzdbrahxjy3hzrxid.onion lockbitnthkolp2mfa5byjrx2mcbleruktoiawsprqrducnrzilchjid.onion lockbitotfzuq2lpyydzgbhelps2mcz62cpix4nzpcyaak5444iwfmqd.onion lockbitqth2ij5cdqmj4cdchoh3etnlbh74utqviwqb5svvhxygnmoqd.onion lockbitst7jglgbsj7aijbiqvxwmlhcs7e7gb3eeqx7rjtxsjklw4yyd.onion lockbitwnklgh3lt6umrbiztgzl6qujtovdtcovdjhavepp7bpvcmfid.onion lockbity44loulvujiaoels7knti2tfsnglclnse22syaa6x3vpqp7yd.onion lockbity7oz7kjcdcgacvihhsli6oimuodmmaftw5omdpgscxdc3mhid.onion lockbitynxdcxtuvma5deq5pxtnqoacftuigkk37xjq3whefozdpcuad.onion