lockfile | d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5 | Triage

Sharing

General

Target

d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5.exe
Size

1.8MB
Sample

221011-hamjlsacb4
MD5

069170f61d9638c87dab750877065a4a
SHA1

21b592ca0ce2e353640893b039eb84dfc7d55d14
SHA256

d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5
SHA512

bb9c4965c5b67b2f1c6190de6daad373bc4cdc7b4c596d50547408447ba9553904ec4e9c49038ef2ffafc80dffcd43462a67d7097ed4bdcce60356da6e73d218
SSDEEP

24576:EnA1KgRYWHEvtd8LHhFJpxjMnA1KgRYWHEvtd8LHhFJpxjJ:D1K5ve1K5v

Score

10^/10

lockfile ransomware spyware stealer

Malware Config

Targets

- Target
  
  d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5.exe
- Size
  
  1.8MB
- MD5
  
  069170f61d9638c87dab750877065a4a
- SHA1
  
  21b592ca0ce2e353640893b039eb84dfc7d55d14
- SHA256
  
  d742fc3fe56d39a8245264e3b17480de278b720fd8024c8401886331fbdbcad5
- SHA512
  
  bb9c4965c5b67b2f1c6190de6daad373bc4cdc7b4c596d50547408447ba9553904ec4e9c49038ef2ffafc80dffcd43462a67d7097ed4bdcce60356da6e73d218
- SSDEEP
  
  24576:EnA1KgRYWHEvtd8LHhFJpxjMnA1KgRYWHEvtd8LHhFJpxjJ:D1K5ve1K5v
Score

10^/10

lockfile ransomware spyware stealer
- LockFile
  LockFile is a new ransomware that emerged in July 2021 with ProxyShell vulnerabilties.
  ransomware lockfile
- Drops startup file
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

lockfileransomwarespywarestealer

behavioral2

lockfileransomwarespywarestealer