21fc9d40d7ff60cd4bef88b64ebd78cf53cf23ff9e5a2b4e64cbf4d8116e7e8f | Triage

Sharing

General

Target

2024-09-25_e6a3c4e5384688911180306d266abc0d_lockbit
Size

37KB
Sample

240925-y6y6aayhkf
MD5

e6a3c4e5384688911180306d266abc0d
SHA1

cf82055ac030417416b98eed2d09499e80824fa7
SHA256

21fc9d40d7ff60cd4bef88b64ebd78cf53cf23ff9e5a2b4e64cbf4d8116e7e8f
SHA512

a9d18208538d9340b2ea1a22858e52773c9a70740cd661e222c146d43052001ad02b636c89a5ebfcd8febea3dd704301aa85173967039218e6c179d40b75c5e9
SSDEEP

768:GlKan8kr2D6AKlLO+SNhBgCHDck4MV0ggv8KoETBB9D3xvjHhx4eC7Xj8Qc1x:q8/6A0q5HDR4oWBx3xrBx41z8Qcj

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  2024-09-25_e6a3c4e5384688911180306d266abc0d_lockbit
- Size
  
  37KB
- MD5
  
  e6a3c4e5384688911180306d266abc0d
- SHA1
  
  cf82055ac030417416b98eed2d09499e80824fa7
- SHA256
  
  21fc9d40d7ff60cd4bef88b64ebd78cf53cf23ff9e5a2b4e64cbf4d8116e7e8f
- SHA512
  
  a9d18208538d9340b2ea1a22858e52773c9a70740cd661e222c146d43052001ad02b636c89a5ebfcd8febea3dd704301aa85173967039218e6c179d40b75c5e9
- SSDEEP
  
  768:GlKan8kr2D6AKlLO+SNhBgCHDck4MV0ggv8KoETBB9D3xvjHhx4eC7Xj8Qc1x:q8/6A0q5HDR4oWBx3xrBx41z8Qcj
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Impair Defenses: Safe Mode Boot
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Safe Mode Boot

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery