ff5c507b0d2fa71c8103836b3af7e7300a46979cd63e5c04361e7445fcaa877c | Triage

Sharing

General

Target

2024-10-12_ad176230757b9fd124e6c78d6faec1da_lockbit
Size

33KB
Sample

241012-fp6jxszajm
MD5

ad176230757b9fd124e6c78d6faec1da
SHA1

0fb029bdca41f990fed81ec602c503bb00e60a1d
SHA256

ff5c507b0d2fa71c8103836b3af7e7300a46979cd63e5c04361e7445fcaa877c
SHA512

967287043853ff9a5afae5c2940246311349ebc308a57264c9f9b8b661fdc4314ef8186555579a13eb5127e32dcaddc53b48c5cf71b9ffc74d1657053b8e8e76
SSDEEP

768:HFOj0Pkj5ModZ4h2wd8iGjqW7AnHvtMaWRBB5sx4PC74801whP:lHE5Mod2kwd8L4qa4Bax40480KP

Score

7^/10

defense_evasion discovery

Malware Config

Targets

- Target
  
  2024-10-12_ad176230757b9fd124e6c78d6faec1da_lockbit
- Size
  
  33KB
- MD5
  
  ad176230757b9fd124e6c78d6faec1da
- SHA1
  
  0fb029bdca41f990fed81ec602c503bb00e60a1d
- SHA256
  
  ff5c507b0d2fa71c8103836b3af7e7300a46979cd63e5c04361e7445fcaa877c
- SHA512
  
  967287043853ff9a5afae5c2940246311349ebc308a57264c9f9b8b661fdc4314ef8186555579a13eb5127e32dcaddc53b48c5cf71b9ffc74d1657053b8e8e76
- SSDEEP
  
  768:HFOj0Pkj5ModZ4h2wd8iGjqW7AnHvtMaWRBB5sx4PC74801whP:lHE5Mod2kwd8L4qa4Bax40480KP
Score

7^/10

defense_evasion discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscovery

behavioral2

defense_evasiondiscovery