lockbit | 98d7ec465a754cac49376ce4bc934eef2fc483d789b582d361ba0bd32c623a7b

Resubmissions

08/08/2024, 04:49

240808-ff4nzazcmj10

08/08/2024, 04:41

240808-fbj4rstbqd10

Sharing

Copy URL Twitter E-mail

General

Target
2024-08-08_3d293b21be3c8ebb13ca2d4738835a0e_darkside
Size 146KB
Sample240808-ff4nzazcmj
SHA256 98d7ec465a754cac49376ce4bc934eef2fc483d789b582d361ba0bd32c623a7b
MD5 3d293b21be3c8ebb13ca2d4738835a0e
SHA1 9bd5479d5c285f78fbd5ad55a227001656aa837b
SHA512 50d15048238029d199f9f9559cccc608bef39e71e487122ff714d4a2ee88af540bef4c798fc86264ea44b2211f7d3168b13fedb05d1faab95594892c3a974a3f
SSDEEP 3072:6qJogYkcSNm9V7Dvts3Kr7ZsPDzFY0mT:6q2kc4m9tDVs62PHF
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  2024-08-08_3d293b21be3c8ebb13ca2d4738835a0e_darkside
- Size 146KB
- SHA256 98d7ec465a754cac49376ce4bc934eef2fc483d789b582d361ba0bd32c623a7b
- MD5 3d293b21be3c8ebb13ca2d4738835a0e
- SHA1 9bd5479d5c285f78fbd5ad55a227001656aa837b
- SHA512 50d15048238029d199f9f9559cccc608bef39e71e487122ff714d4a2ee88af540bef4c798fc86264ea44b2211f7d3168b13fedb05d1faab95594892c3a974a3f
- SSDEEP 3072:6qJogYkcSNm9V7Dvts3Kr7ZsPDzFY0mT:6q2kc4m9tDVs62PHF
- MD5 SHA1 SHA512 SSDEEP
Score

9^/10

discovery ransomware spyware stealer
- Renames multiple (362) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Renames multiple (362) files with added filename extension

Reads user/profile data of web browsers

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2