Overview

overview

10

Static

static

10

2024-07-10...de.exe

windows7-x64

9

2024-07-10...de.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-07-10_407ce6cf7b3ca16443b0b5eb49c01b3c_darkside

  • Size

    145KB

  • Sample

    240710-3qzt4awgnq

  • MD5

    407ce6cf7b3ca16443b0b5eb49c01b3c

  • SHA1

    4c7a95bc4e92110f8ec7e050fb2c6f519f94dcc0

  • SHA256

    870da2dea3d586ccaa3230464b910704460f354afdd417587a167735e478b0be

  • SHA512

    a5aedc10cf1e7abf1491b7a680f5ecd2b07975fc2d0f859f4f277ff55b8899fd0402e949a81c20b660026a28a24565f2119386ed3e882886f2141a904fa0cb34

  • SSDEEP

    3072:yqJogYkcSNm9V7DMr3lW1mOXY6pcphw9k8nT:yq2kc4m9tDOqno6pb9k8

Score
10/10
lockbitransomwarespywarestealer

Malware Config

Targets

    • Target

      2024-07-10_407ce6cf7b3ca16443b0b5eb49c01b3c_darkside

    • Size

      145KB

    • MD5

      407ce6cf7b3ca16443b0b5eb49c01b3c

    • SHA1

      4c7a95bc4e92110f8ec7e050fb2c6f519f94dcc0

    • SHA256

      870da2dea3d586ccaa3230464b910704460f354afdd417587a167735e478b0be

    • SHA512

      a5aedc10cf1e7abf1491b7a680f5ecd2b07975fc2d0f859f4f277ff55b8899fd0402e949a81c20b660026a28a24565f2119386ed3e882886f2141a904fa0cb34

    • SSDEEP

      3072:yqJogYkcSNm9V7DMr3lW1mOXY6pcphw9k8nT:yq2kc4m9tDOqno6pb9k8

    Score
    9/10
    ransomwarespywarestealer

    • Renames multiple (809) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks