lockbit | 98d7ec465a754cac49376ce4bc934eef2fc483d789b582d361ba0bd32c623a7b

Resubmissions

08-08-2024 04:49

240808-ff4nzazcmj 10

08-08-2024 04:41

240808-fbj4rstbqd 10

Sharing

Copy URL

Twitter E-mail

General

Target

2024-08-08_3d293b21be3c8ebb13ca2d4738835a0e_darkside
Size

146KB
Sample

240808-ff4nzazcmj
MD5

3d293b21be3c8ebb13ca2d4738835a0e
SHA1

9bd5479d5c285f78fbd5ad55a227001656aa837b
SHA256

98d7ec465a754cac49376ce4bc934eef2fc483d789b582d361ba0bd32c623a7b
SHA512

50d15048238029d199f9f9559cccc608bef39e71e487122ff714d4a2ee88af540bef4c798fc86264ea44b2211f7d3168b13fedb05d1faab95594892c3a974a3f
SSDEEP

3072:6qJogYkcSNm9V7Dvts3Kr7ZsPDzFY0mT:6q2kc4m9tDVs62PHF

Score

10^/10

Malware Config

Targets

- Target
  
  2024-08-08_3d293b21be3c8ebb13ca2d4738835a0e_darkside
- Size
  
  146KB
- MD5
  
  3d293b21be3c8ebb13ca2d4738835a0e
- SHA1
  
  9bd5479d5c285f78fbd5ad55a227001656aa837b
- SHA256
  
  98d7ec465a754cac49376ce4bc934eef2fc483d789b582d361ba0bd32c623a7b
- SHA512
  
  50d15048238029d199f9f9559cccc608bef39e71e487122ff714d4a2ee88af540bef4c798fc86264ea44b2211f7d3168b13fedb05d1faab95594892c3a974a3f
- SSDEEP
  
  3072:6qJogYkcSNm9V7Dvts3Kr7ZsPDzFY0mT:6q2kc4m9tDVs62PHF
Score

9^/10

discovery ransomware spyware stealer
- Renames multiple (362) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Renames multiple (362) files with added filename extension

Reads user/profile data of web browsers

Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2