5b9ebd56a446b71cd907127793b17764209c9fd4ec0e7f8a4dd74662dde11ccb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-04_53574b686d22b6b8d80f2f058af9f88c_lockbit
Size

32KB
Sample

240904-x3pxrsveml
MD5

53574b686d22b6b8d80f2f058af9f88c
SHA1

eca31b86ddc5a21a57652d491ab9a6e5d6eceed5
SHA256

5b9ebd56a446b71cd907127793b17764209c9fd4ec0e7f8a4dd74662dde11ccb
SHA512

c475946ae67146ab9caf1f3fa5496f97f3d9a4710d37538cdaa247f56f3aea88a89ebd2d279be2920a1ab5ccf04ca7d7bd263c89b3c5e5923f0675286be0ddef
SSDEEP

768:3FOj0Pkj5ModZ4h2wd8iGjqW7AnHvtMaWRBB5sx4PC74801wDd:1HE5Mod2kwd8L4qa4Bax40480od

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  2024-09-04_53574b686d22b6b8d80f2f058af9f88c_lockbit
- Size
  
  32KB
- MD5
  
  53574b686d22b6b8d80f2f058af9f88c
- SHA1
  
  eca31b86ddc5a21a57652d491ab9a6e5d6eceed5
- SHA256
  
  5b9ebd56a446b71cd907127793b17764209c9fd4ec0e7f8a4dd74662dde11ccb
- SHA512
  
  c475946ae67146ab9caf1f3fa5496f97f3d9a4710d37538cdaa247f56f3aea88a89ebd2d279be2920a1ab5ccf04ca7d7bd263c89b3c5e5923f0675286be0ddef
- SSDEEP
  
  768:3FOj0Pkj5ModZ4h2wd8iGjqW7AnHvtMaWRBB5sx4PC74801wDd:1HE5Mod2kwd8L4qa4Bax40480od
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery