Overview

overview

7

Static

static

3

2024-04-26...re.exe

windows7-x64

7

2024-04-26...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-26_720b6b8221a5c24c1708ba739942592f_bkransomware

  • Size

    96KB

  • Sample

    240426-jfraesbg9s

  • MD5

    720b6b8221a5c24c1708ba739942592f

  • SHA1

    1508364db9cbf338616e1d85062c1ee15cd38e06

  • SHA256

    ce9bd85be24f04aab9da1650fc3c1ad39834b4002325f6da539d40466f8ae429

  • SHA512

    2ff651d3a67f6afd4c453cd31c1284aedf386d1c1d62cbeca1b3a0f5dc729443438601ba6e816bc5a93d3adddf98d9fe27d514c4d88195ccbc5a934539a9e23c

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTMVelQhi+dDD9GWY/2:ZRpAyazIliazTMV0n+tm/2

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-26_720b6b8221a5c24c1708ba739942592f_bkransomware

    • Size

      96KB

    • MD5

      720b6b8221a5c24c1708ba739942592f

    • SHA1

      1508364db9cbf338616e1d85062c1ee15cd38e06

    • SHA256

      ce9bd85be24f04aab9da1650fc3c1ad39834b4002325f6da539d40466f8ae429

    • SHA512

      2ff651d3a67f6afd4c453cd31c1284aedf386d1c1d62cbeca1b3a0f5dc729443438601ba6e816bc5a93d3adddf98d9fe27d514c4d88195ccbc5a934539a9e23c

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTMVelQhi+dDD9GWY/2:ZRpAyazIliazTMV0n+tm/2

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks