BlackByte.SZ!MTB' in file 'locker_yi13jz_windows_amd64.exe', preventing attempted open by 'ntoskrnl.exe'

Classification: Malicious

BlackByte.SZ!MTB' in file 'locker_yi13jz_windows_amd64.exe', preventing attempted open by 'ntoskrnl.exe' is a malicious file sample (Windows 64-bit…

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: THE GENTLEMEN (G1058)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gentlemen ThreatFox Abuse.ch 2026-05-13 15:06:13 2026-05-13 15:25:06
The Gentlemen ransomware Windows encryptor payload Check Point Research 2026-05-13 00:00:00 2026-05-13 00:00:00 malicious-activity G1058 The Gentlemen
Generic Malware Hybrid-Analysis 2026-04-14 06:45:05 2026-04-14 06:45:05

Tags

cerber evasive ransomware win.gentlemen payload the-gentlemen

Sample information

Filenames
BlackByte.SZ!MTB' in file 'locker_yi13jz_windows_amd64.exe', preventing attempted open by 'ntoskrnl.exe'
File type
PE32+ executable for MS Windows 6.01 (console), x8 ...
MD5
1b6d9c7cb4ad65da282fc48a9a30f97e
SHA-1
f8058e687f75a13a7874b569bf885f9097629271
SHA-256
24ac3588fb8cfbff63b7fdfcbc7dec1f3c60e54e6f949dd69d68e89e0c89d966
First indexed
2025-09-09 00:00:00
Last updated
2026-10-15 03:14:31