08a2ddf71430191b7926a496d7e331bb5f33567d9ab8224e8fa4e8501946e039 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-26_0e9d546c6c4174e232194144d5defc6a_bkransomware
Size

71KB
Sample

240426-d9qcbshf27
MD5

0e9d546c6c4174e232194144d5defc6a
SHA1

66994a793dbb15d4d71ed11c2d912b94565d5894
SHA256

08a2ddf71430191b7926a496d7e331bb5f33567d9ab8224e8fa4e8501946e039
SHA512

4d4e7d4ca9e8e3d231595d2a4c8829a4c6e2ba755e7945b7b5de454a78f5fd4e5c9542b3e101af894c50cb76feea69d7b93ee68bfb724d562247e2bc9ebfe88f
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTR:ZhpAyazIlyazTR

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-04-26_0e9d546c6c4174e232194144d5defc6a_bkransomware
- Size
  
  71KB
- MD5
  
  0e9d546c6c4174e232194144d5defc6a
- SHA1
  
  66994a793dbb15d4d71ed11c2d912b94565d5894
- SHA256
  
  08a2ddf71430191b7926a496d7e331bb5f33567d9ab8224e8fa4e8501946e039
- SHA512
  
  4d4e7d4ca9e8e3d231595d2a4c8829a4c6e2ba755e7945b7b5de454a78f5fd4e5c9542b3e101af894c50cb76feea69d7b93ee68bfb724d562247e2bc9ebfe88f
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTR:ZhpAyazIlyazTR
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer