Overview

overview

7

Static

static

3

2024-04-25...re.exe

windows7-x64

7

2024-04-25...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-25_d4b8520601f6246834ece03c274dacc0_bkransomware

  • Size

    96KB

  • Sample

    240425-hdgsjagf3v

  • MD5

    d4b8520601f6246834ece03c274dacc0

  • SHA1

    49587a09aa5c571340ccc055a7c9fe8856937dd8

  • SHA256

    1f54828bc848b5e584b9035e442e59f89ff23b498c42a08d7933647381637296

  • SHA512

    0a5f98fd6e9f28867c3a1ba132e4cd62f3cf23f498b209b9e3caf650063faa1c3afbae15a9fd35e0b8bc77add6e784ae195fff8d10622a1a9d07089480bde3cc

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTxM2pMxd4frSemzf9U:ZRpAyazIliazTi54TvA9U

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-25_d4b8520601f6246834ece03c274dacc0_bkransomware

    • Size

      96KB

    • MD5

      d4b8520601f6246834ece03c274dacc0

    • SHA1

      49587a09aa5c571340ccc055a7c9fe8856937dd8

    • SHA256

      1f54828bc848b5e584b9035e442e59f89ff23b498c42a08d7933647381637296

    • SHA512

      0a5f98fd6e9f28867c3a1ba132e4cd62f3cf23f498b209b9e3caf650063faa1c3afbae15a9fd35e0b8bc77add6e784ae195fff8d10622a1a9d07089480bde3cc

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTxM2pMxd4frSemzf9U:ZRpAyazIliazTi54TvA9U

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks