3c43307c95bc1d14bcd0832fc23723b448ac589e43cadb15f703399690185804 | Triage

Sharing

General

Target

2024-09-19_203b9de006b29f4aff371052e6523d2d_lockbit
Size

54KB
Sample

240919-dyhhcaycjf
MD5

203b9de006b29f4aff371052e6523d2d
SHA1

b4c580c780891b510cf58447bbb6394b2f81b0f5
SHA256

3c43307c95bc1d14bcd0832fc23723b448ac589e43cadb15f703399690185804
SHA512

d4b17b00675f239067d8a301bcde0e6ebe7282c94aae8410b251aad71d1cb3f9b6d389db52b9280fbcd77d79075d37b76329c739617f5432b7c7cc2e061a2650
SSDEEP

1536:rgxAxuW2ldyYvhauBSx40480UDkvvvvvvvvvvvvvvvvvv6JK+:6AxuW+dDvUuBSx40480OBJK+

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  2024-09-19_203b9de006b29f4aff371052e6523d2d_lockbit
- Size
  
  54KB
- MD5
  
  203b9de006b29f4aff371052e6523d2d
- SHA1
  
  b4c580c780891b510cf58447bbb6394b2f81b0f5
- SHA256
  
  3c43307c95bc1d14bcd0832fc23723b448ac589e43cadb15f703399690185804
- SHA512
  
  d4b17b00675f239067d8a301bcde0e6ebe7282c94aae8410b251aad71d1cb3f9b6d389db52b9280fbcd77d79075d37b76329c739617f5432b7c7cc2e061a2650
- SSDEEP
  
  1536:rgxAxuW2ldyYvhauBSx40480UDkvvvvvvvvvvvvvvvvvv6JK+:6AxuW+dDvUuBSx40480OBJK+
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery