143990ec8f13c893632ac5b7c8397f3b58264462ce9a4f204ee056484892cd20 | Triage

Sharing

General

Target

2024-09-21_aa290f7c9cae41cadfc05df5ca35506f_lockbit
Size

123KB
Sample

240921-r4axcaxhkq
MD5

aa290f7c9cae41cadfc05df5ca35506f
SHA1

e6dc1baf0480869a343a48633703b7c44f138284
SHA256

143990ec8f13c893632ac5b7c8397f3b58264462ce9a4f204ee056484892cd20
SHA512

2b4e6ed359cb451b5f80c81e1fc0d72711dc058f48bc3f1c2462e93c4353ced934eb0a7a23b37c2a1e3ff90cf727acbe5952cb51ac6a59c779a5fb01b8b40014
SSDEEP

1536:4f/zuJmTn2lvpSzyOvBWg8g3xeevKE2j5uQk:gzHTn2lvpfg8g3xeevKE2j5uJ

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  2024-09-21_aa290f7c9cae41cadfc05df5ca35506f_lockbit
- Size
  
  123KB
- MD5
  
  aa290f7c9cae41cadfc05df5ca35506f
- SHA1
  
  e6dc1baf0480869a343a48633703b7c44f138284
- SHA256
  
  143990ec8f13c893632ac5b7c8397f3b58264462ce9a4f204ee056484892cd20
- SHA512
  
  2b4e6ed359cb451b5f80c81e1fc0d72711dc058f48bc3f1c2462e93c4353ced934eb0a7a23b37c2a1e3ff90cf727acbe5952cb51ac6a59c779a5fb01b8b40014
- SSDEEP
  
  1536:4f/zuJmTn2lvpSzyOvBWg8g3xeevKE2j5uQk:gzHTn2lvpfg8g3xeevKE2j5uJ
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Impair Defenses: Safe Mode Boot
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Safe Mode Boot

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery