bcf5ba1ac9037f4f72f6cb26ce0493f1bff8ec2be7a9cc1c87602bc900ebcc84

General

Target
LockerBuilder.rar
Size 867KB
Sample260910-ybtmbavekg
SHA256 bcf5ba1ac9037f4f72f6cb26ce0493f1bff8ec2be7a9cc1c87602bc900ebcc84
MD5 f259823705593aa167257d2619778e40
SHA1 d4af3f10e0f6fabeefc1a67c99cf9e6fb2cb2a68
SHA512 49084f6039bc3b7a7e23e63413898e633006bf2cc23be76def18ffd0722469e09ed5e23ad9604b20c9ead17ee243365e45152abbfa8d69e0f176c3f9877ce8ab
SSDEEP 24576:rLpPEH4tBEQ8Ga4u6rp+Z1hRsGfYofK4zZ1ivH:rL1iQHlu6kThzYZ4zo
TLSH
T1A71533990D72F9345F0356742A7399F3ED433D698A0844ACFE8A923252164C17BFBA1F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  LockerBuilder/LockerBuilder.exe
- Size 10KB
- SHA256 33b9d5e64e7fe70168c77cac081b9192a98e6e9f6eb331c7cef16800a0bdb55f
- MD5 af428b8bd8764c6482a9ed981c4235e0
- SHA1 ceaf8f128dbe6a0f1b52110201e94b0bff11d91e
- SHA512 b09bf8016c2e6e1110770085d3251581555c0ffd9d9f78fc05b0b8787a3538106783ac1a410890897093bf28e2bd2481bb05d7af5948634ad5ff80abe86d4ce7
- SSDEEP 192:qeyshiK724jLS3x3jnZ8DTN1ECQLsxE/2Ga0xSo08fdm:q8s624j09Z8TEBLsxBMSorfd
- TLSH
  T18E22085AA7E8C335E8FA4B722CB315400373BA296966DB5F5CCD518F1E6374006A37A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  LockerBuilder/MetroFramework.Fonts.dll
- Size 656KB
- SHA256 e96030fddaf7e78401567ee82480ad75ee48d3556199a3f85c0ec669edac2ef4
- MD5 612080028164b12939751dcccbb68d4a
- SHA1 db066593c63d2eff41a5af1b49a3e098b60e0013
- SHA512 1879c960e27e32941c0c992b84803e7a1f8d243bfc88d17d3d32baca772290b9ea60a6ea90d53170be3bf7f0a58fe71ec901dc66aa560b4bf68b1da56c09fe18
- SSDEEP 12288:H+/9JcJlYqCNktA+SXfGpq2fHowSqCNktA+SXfvJR9FrIJJaqCNktA+SXfUC:H+/3qlrCNoh+UqgIwhCNoh+JR9FrIJJw
- TLSH
  T1BDE429B5760139E6EF11C4B7C260FD80192B7863A77B802A68E3077A88575CDFE53E46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  LockerBuilder/MetroFramework.dll
- Size 149KB
- SHA256 baf326f52d39155d722465947f4cc67e6e90cfd0f89954eab959568e9bc342aa
- MD5 44538b311e9ec2bcf0a6452702628d99
- SHA1 da67301539903775708e9ec913654851e9e8eade
- SHA512 b65e3bc1c0f7b4c8f778cf52a36d628301d60aab53fdaf0355163e4865bc3d3adbf8870bb6cefc604708fdf2c0e72258eaf2fe301d524af2f77bc08014c9610a
- SSDEEP 3072:LU0T+erz8jYxYg5lzrPHlMUzxXd4kRZPI9q:vT+erz8jYxYgv/lxXGWPS
- TLSH
  T139E33B21770D457FC6BF4A7AF0A12492C3B0DC51FA7BDF5D5C82A29C989B794AE01283
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  LockerBuilder/Stub/Stub.exe
- Size 209KB
- SHA256 41c4ce0997c63ab41874dae9ccc0b4922d7426eb25f5a4640fcbf0ee89002fa0
- MD5 3ae6028d14180f116af3ab3e3bdd49e4
- SHA1 7752b122ce3763f6c1a11694b2c11aa50e577a8c
- SHA512 6bf0ea273ff85f2f3ce54f2173bb199b7eae7e5a77d30f2c68379ee75bc1220f82bcb0976acc6637a4ec70dd6c5404d9131e6a0dca0d52412f9901c90fe5f356
- SSDEEP 6144:608A/ehUOqx8PBgnRtQ0UiB97SCpMW90KImQijnCbJewO:6XAwUOqx8PijQo
- TLSH
  T1DC2449981397897DD63D237ED0A1120907F56223C507F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral4
- Target
  LockerBuilder/WinLock.exe
- Size 209KB
- SHA256 212404ec25a0eefa2db896e69f82908d848a17116ef6a0eb83d7e41793bf4593
- MD5 75ba24493fb2c421ae7af148483449b1
- SHA1 e1bf74d6b52579d039e1c2cc6d0a3fc784c1f196
- SHA512 ad1f6f09a5a21e9de4e98a812fdf87b0790d8231662ed01f001699c19bbe05b8735160830b0e752cc74c0ddd5a0184fb46578534b7b913d86dca183e30701733
- SSDEEP 6144:RM8A/ehUOqx8PB6nRtQ0UOB97SCpMW90KImQijnCbJewO:RvAwUOqx8PsjQE
- TLSH
  T12B2449981397897DD67D237ED0A1120907F56223C503F34E9EE5E4F89E2B3129B22B97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
behavioral5
- Target
  LockerBuilder/dnlib.dll
- Size 1.1MB
- SHA256 97ef5328d1d1703924c48d9cd1d45b7227fe3836e116dcded623b6a0dbd52c23
- MD5 c087c70deb98db9d0b046d0a3d0e582a
- SHA1 f195b25b9c2d85006e15dce3b0b22eab6a4d16a9
- SHA512 9a1c40ef39ea5cb28ace6ba069b1afbf55ca47e4189b06d3cd033cbf7d01a838e7b5edb0e8578547a219a312446a5c2daa68e784ba2fb5c1c799dcc4500ab24c
- SSDEEP 24576:ct140a1plV+Th8rQ7F/qy0EFXnh8MviJa319Iv7f1NGgV:LIwy
- TLSH
  T12B456C1137FD9B77E06F873AE835061903F1D406A697EF4F6A54ABAA6C833685C00397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6