Overview

overview

10

Static

static

d742fc3fe5...d5.exe

windows7-x64

10

d742fc3fe5...d5.exe

windows10-2004-x64

10

Resubmissions

11-10-2022 06:39

221011-henx8sadg7 10

11-10-2022 06:31

221011-haj4gsaebn 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5

  • Size

    1.8MB

  • Sample

    221011-haj4gsaebn

  • MD5

    069170f61d9638c87dab750877065a4a

  • SHA1

    21b592ca0ce2e353640893b039eb84dfc7d55d14

  • SHA256

    d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5

  • SHA512

    bb9c4965c5b67b2f1c6190de6daad373bc4cdc7b4c596d50547408447ba9553904ec4e9c49038ef2ffafc80dffcd43462a67d7097ed4bdcce60356da6e73d218

  • SSDEEP

    24576:EnA1KgRYWHEvtd8LHhFJpxjMnA1KgRYWHEvtd8LHhFJpxjJ:D1K5ve1K5v

Score
10/10
lockfileransomwarespywarestealer

Malware Config

Targets

    • Target

      d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5

    • Size

      1.8MB

    • MD5

      069170f61d9638c87dab750877065a4a

    • SHA1

      21b592ca0ce2e353640893b039eb84dfc7d55d14

    • SHA256

      d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5

    • SHA512

      bb9c4965c5b67b2f1c6190de6daad373bc4cdc7b4c596d50547408447ba9553904ec4e9c49038ef2ffafc80dffcd43462a67d7097ed4bdcce60356da6e73d218

    • SSDEEP

      24576:EnA1KgRYWHEvtd8LHhFJpxjMnA1KgRYWHEvtd8LHhFJpxjJ:D1K5ve1K5v

    Score
    10/10
    lockfileransomwarespywarestealer

    • LockFile

      LockFile is a new ransomware that emerged in July 2021 with ProxyShell vulnerabilties.

      ransomwarelockfile

    • Drops file in Drivers directory

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks