VERY IMPORTANT

This report provides an in-depth analysis of the DoNex ransomware, a spinoff of the LockBit ransomware family. It examines the binary's functionality, including process termination, service control, drive and network share enumeration, file discovery, encryption, and post-encryption cleanup. The report also highlights the similarities between DoNex and LockBit, suggesting that the threat actors behind DoNex are repurposing the leaked LockBit code for their malicious activities.