General
- Target LockDownBrowser-2-1-3-09-710125769.exe
- Size 132.2MB
- Sample260628-hbtdjsfy71
- SHA256 4d8ecdfe197802c7a1e51487e9e1596935ac8d94382e1a2682443b62fbde7325
- MD5 851748bbdf3f9d71cf934fdad4dc2ae6
- SHA1 f861e5d02646588e48411bb94c32cf5ea1a1e590
- SHA512 d13697cec8f75a9975f5d4bd298afd2ff5b47ed22987479b4139ded805a35b76bb35f04f93deeeea934abb79e82e6ea3d95786b76d37ffcd9c063a979ebf133f
- SSDEEP 3145728:PX6uM+AnBDva/76kjxVnWhbFAYXmNCbjpNH85:/6uM+ABDva/lrWhbF1hd
- TLSH T1066833A014280EA5C6BD513AB685B3574FCD24930C61A5BBA58C04FC1AB7254FBE7CEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
LockDownBrowser-2-1-3-09-710125769.exe
Resource
win11-20260513-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target LockDownBrowser-2-1-3-09-710125769.exe
- Size 132.2MB
- SHA256 4d8ecdfe197802c7a1e51487e9e1596935ac8d94382e1a2682443b62fbde7325
- MD5 851748bbdf3f9d71cf934fdad4dc2ae6
- SHA1 f861e5d02646588e48411bb94c32cf5ea1a1e590
- SHA512 d13697cec8f75a9975f5d4bd298afd2ff5b47ed22987479b4139ded805a35b76bb35f04f93deeeea934abb79e82e6ea3d95786b76d37ffcd9c063a979ebf133f
- SSDEEP 3145728:PX6uM+AnBDva/76kjxVnWhbFAYXmNCbjpNH85:/6uM+ABDva/lrWhbF1hd
- TLSH T1066833A014280EA5C6BD513AB685B3574FCD24930C61A5BBA58C04FC1AB7254FBE7CEF
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1