cb75420909e090872b45869189d89ec2124e1e891f06638657f74e9bc37483cd | Triage

Sharing

General

Target

2024-09-19_50539ba70c3c58cabb24a46fc9133c08_lockbit
Size

38KB
Sample

240919-e2sm6a1brf
MD5

50539ba70c3c58cabb24a46fc9133c08
SHA1

e33e16055dd3663cf6c5a05951edc53977b1e1f5
SHA256

cb75420909e090872b45869189d89ec2124e1e891f06638657f74e9bc37483cd
SHA512

8fc980363a9dca07319e93584c6d4e9b8c30efe52de551108e201a7a34d5c81c2696558ade5dc18bc85f3e01d9c414a7336d0309153c4dce8363578d3b79291e
SSDEEP

768:GlKa78kr2D6AKlLO+SNhBgCHDck4MV0ggv8KoETBB9D3xvjHhx4eC7Xj8Qc1gdk:q4/6A0q5HDR4oWBx3xrBx41z8Qcydk

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  2024-09-19_50539ba70c3c58cabb24a46fc9133c08_lockbit
- Size
  
  38KB
- MD5
  
  50539ba70c3c58cabb24a46fc9133c08
- SHA1
  
  e33e16055dd3663cf6c5a05951edc53977b1e1f5
- SHA256
  
  cb75420909e090872b45869189d89ec2124e1e891f06638657f74e9bc37483cd
- SHA512
  
  8fc980363a9dca07319e93584c6d4e9b8c30efe52de551108e201a7a34d5c81c2696558ade5dc18bc85f3e01d9c414a7336d0309153c4dce8363578d3b79291e
- SSDEEP
  
  768:GlKa78kr2D6AKlLO+SNhBgCHDck4MV0ggv8KoETBB9D3xvjHhx4eC7Xj8Qc1gdk:q4/6A0q5HDR4oWBx3xrBx41z8Qcydk
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Impair Defenses: Safe Mode Boot
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Safe Mode Boot

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery