Continuous Distribution of LockBit 2.0 Ransomware Disguised as Resumes

The ASEC analysis team has identified that Lockbit 2.0 is being distributed in a MalPE format instead of the NSIS format which the team had introduced it with previously. The MalPE format is a type of packing method that disrupts the analysis of the actual malware. It then decrypts and executies its PE files through an internal shell code.

We have recently discovered during our monitoring of ransomware that the distribution …

analysis asec claim code continuous copyright distributed distribution e-mail files internal lockbit lockbit 2.0 lockbit 2.0 ransomware lockbit ransomware mail malpe malware malware analysis ransomware resumes shell team