Skip to content

Malware

DragonForce

According to Idan Malihi, this ransomware is based on the LockBit builder from 2022, utilizing similar configurations and attack methods.

DragonForce is a Windows malware family.

Background

Per Idan Malihi, this ransomware derives from the 2022 LockBit builder and reuses comparable configurations and attack techniques. Both its icon and wallpaper are stored within the binary's overlay, Zlib-compressed, and decompressed and loaded on the fly at runtime.


Source: Malpedia (Fraunhofer FKIE).