Abstract

All forms of data are meant to be secured. The rise in cyber-crime since beginning of the pandemic and the emergence of a variety of techniques and tactics utilized by malware authors has made identification and recovery difficult. LockBit ransom-ware has been in news in recent times. The APT behind deployment of this ransom-ware virus has compromised several organizations and the impacts are, worth more than millions, lives of people by stealing their personal identifiable information. It is important to understand the behavior of such malware, to block it and to identify the anti-analysis stuff it performs. The challenges here were a packed sample, a rebooting command-line trigger and encryption of several files that can possess high trouble to operations of any workplace.