3bf46103a7fffa809235aa999a497c12c11f0b198237216999198c13743c4efd | Triage

Sharing

General

Target

2024-04-27_4c7d38c93eb3c020d71179e181754db2_bkransomware
Size

96KB
Sample

240427-cv9xraaa4t
MD5

4c7d38c93eb3c020d71179e181754db2
SHA1

b5eba26d8a8b5f94deb16e01cb593860e3fac1b1
SHA256

3bf46103a7fffa809235aa999a497c12c11f0b198237216999198c13743c4efd
SHA512

56d1e429f8a982910b519bfd758b9fea1aa2fc9230208518dde949e2d3cd4dcbe78830869ed5558eb2cc69ab30325104b6ad992c52dd21ae06da59f886c39603
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT3lEFGg3YZSCCbVa:ZRpAyazIliazTVEFGgoZfCbQ

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-04-27_4c7d38c93eb3c020d71179e181754db2_bkransomware
- Size
  
  96KB
- MD5
  
  4c7d38c93eb3c020d71179e181754db2
- SHA1
  
  b5eba26d8a8b5f94deb16e01cb593860e3fac1b1
- SHA256
  
  3bf46103a7fffa809235aa999a497c12c11f0b198237216999198c13743c4efd
- SHA512
  
  56d1e429f8a982910b519bfd758b9fea1aa2fc9230208518dde949e2d3cd4dcbe78830869ed5558eb2cc69ab30325104b6ad992c52dd21ae06da59f886c39603
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT3lEFGg3YZSCCbVa:ZRpAyazIliazTVEFGgoZfCbQ
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer