77bd3bbd08c95411141ad6ef51565adcd9606b3ff915e284d6c5af1e0f1fcf89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-25_f6556f5b814a5184568c063fb32395ec_bkransomware
Size

96KB
Sample

240425-s17mkscb62
MD5

f6556f5b814a5184568c063fb32395ec
SHA1

073773ba1abf1b9b7e86a1396257250dd8039135
SHA256

77bd3bbd08c95411141ad6ef51565adcd9606b3ff915e284d6c5af1e0f1fcf89
SHA512

bc190601712cfb06f63103c22d44a0f7535da3f818133bd8675237a01028cfb5cd27cf5190057746055a8819171089ad563fe70cfb75d303fedef5ee76edbb0e
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT2Ts0DMRB7LE:ZhpAyazIlyazT2Tfa7o

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-04-25_f6556f5b814a5184568c063fb32395ec_bkransomware
- Size
  
  96KB
- MD5
  
  f6556f5b814a5184568c063fb32395ec
- SHA1
  
  073773ba1abf1b9b7e86a1396257250dd8039135
- SHA256
  
  77bd3bbd08c95411141ad6ef51565adcd9606b3ff915e284d6c5af1e0f1fcf89
- SHA512
  
  bc190601712cfb06f63103c22d44a0f7535da3f818133bd8675237a01028cfb5cd27cf5190057746055a8819171089ad563fe70cfb75d303fedef5ee76edbb0e
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT2Ts0DMRB7LE:ZhpAyazIlyazT2Tfa7o
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer