lockbit | 13d72d8ee7cdd0d2e343b6dc08b957c9796d411062c6be9d864bded9d7e4c9e1 | Triage

Sharing

General

Target

2025-01-15_1d073f93fb5d03cf4a956ef84ea5f421_darkside
Size

145KB
Sample

250115-nwwmas1qfv
MD5

1d073f93fb5d03cf4a956ef84ea5f421
SHA1

64c6f72e368f74479b90cf7b24e9e3ec1d5e9940
SHA256

13d72d8ee7cdd0d2e343b6dc08b957c9796d411062c6be9d864bded9d7e4c9e1
SHA512

a454402d654b05d1cb866cdf836ad137396c777e11c590542d69e1e69ff5fb8f728c4ebdc77a5600369731ea440f28d8b25320190b27c34637d73c69a15397fe
SSDEEP

1536:qzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDmNgwg0XiOiu/8EINw5YkjPGHUk:ZqJogYkcSNm9V7Dm7i1j0XjuT

Score

10^/10

lockbit discovery spyware stealer

Malware Config

Targets

- Target
  
  2025-01-15_1d073f93fb5d03cf4a956ef84ea5f421_darkside
- Size
  
  145KB
- MD5
  
  1d073f93fb5d03cf4a956ef84ea5f421
- SHA1
  
  64c6f72e368f74479b90cf7b24e9e3ec1d5e9940
- SHA256
  
  13d72d8ee7cdd0d2e343b6dc08b957c9796d411062c6be9d864bded9d7e4c9e1
- SHA512
  
  a454402d654b05d1cb866cdf836ad137396c777e11c590542d69e1e69ff5fb8f728c4ebdc77a5600369731ea440f28d8b25320190b27c34637d73c69a15397fe
- SSDEEP
  
  1536:qzICS4AAwczUUf8y8gvMH+1zGSNAojMP95D1xDmNgwg0XiOiu/8EINw5YkjPGHUk:ZqJogYkcSNm9V7Dm7i1j0XjuT
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer