LockBit Ransomware - XLL Document Malware Analysis

LockBit is spreading their Ransomware via an XLL document which executes a dropper.
Support us on GH: https://guidedhacking.com/register/
Support us on Patreon: https://patreon.com/guidedhacking
Support us on YT: https://www.youtube.com/channel/UCCMi6F5Ac3kQDfffWXQGZDw/join

LockBit Malware Analysis - XLL Document Dropper
https://guidedhacking.com/threads/lockbit-analysis-how-to-get-the-final-binary-from-an-xll.20169/

We'll begin our Lockbit malware analysis by examining the concept of XLL documents. An XLL is a type of DLL used to add functionality to Excel. For our LockBit ransomware investigation, we'll use PEStudio to assess the XLL file. Keep in mind though, it …

analysis concept dll document documents dropper excel exports investigation lockbit lockbit ransomware malware malware analysis ransomware virustotal xll