Resubmissions

16-04-2024 09:10

240416-k5f2eseb24 8

15-04-2024 09:27

240415-le39psdd7y 10

General

  • Target

    LockBit3.0 builder .rar

  • Size

    158KB

  • Sample

    240416-k5f2eseb24

  • MD5

    438e994e567237cd837c7d1ab4cca381

  • SHA1

    6d43e78e66f703a212a33a7fea46191267679fd3

  • SHA256

    f7d05c0e9430ba0621020caad12fa1e8e62acb3bda349cd03240c1938ce7a887

  • SHA512

    cae464209b30e92bb9ed78d5ddc6fe08a1b2aa89e8d70fa0e57a67dadf4c177e88d888ee3fc06351ad4abe54af749e3ae10671dd4953a6e896f1f7c26aaf5524

  • SSDEEP

    3072:slWtN53dw/7+YMflx6m43+T0yw095ZtYxnBLF7rjT+154SIHg2afvX3Y6ZM:sG7tA+YQln43+T0gfivLF/jiXfv4N

Score
8/10

Malware Config

Targets

    • Target

      LockBit3.0 builder .rar

    • Size

      158KB

    • MD5

      438e994e567237cd837c7d1ab4cca381

    • SHA1

      6d43e78e66f703a212a33a7fea46191267679fd3

    • SHA256

      f7d05c0e9430ba0621020caad12fa1e8e62acb3bda349cd03240c1938ce7a887

    • SHA512

      cae464209b30e92bb9ed78d5ddc6fe08a1b2aa89e8d70fa0e57a67dadf4c177e88d888ee3fc06351ad4abe54af749e3ae10671dd4953a6e896f1f7c26aaf5524

    • SSDEEP

      3072:slWtN53dw/7+YMflx6m43+T0yw095ZtYxnBLF7rjT+154SIHg2afvX3Y6ZM:sG7tA+YQln43+T0gfivLF/jiXfv4N

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks