2923289f78ccc0eefe7e54988b5ba323d92c69c178817e978667d69c4a8fc7e0 | Triage

Sharing

General

Target

2024-04-27_b8f51e80298f9c1dae9dff5cff19295d_bkransomware
Size

71KB
Sample

240427-w8jr9sef5z
MD5

b8f51e80298f9c1dae9dff5cff19295d
SHA1

82568ea20cbd2888600a561decca8338e9e098ab
SHA256

2923289f78ccc0eefe7e54988b5ba323d92c69c178817e978667d69c4a8fc7e0
SHA512

6dd46d177361e3d58c330c5370995eb08b65801132983fd09d0af243294476166e87138dfd26072a613c5078570a8ef9e153ef4ddad3eb7a0173b5a34d52697a
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTXy:ZRpAyazIliazTi

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-04-27_b8f51e80298f9c1dae9dff5cff19295d_bkransomware
- Size
  
  71KB
- MD5
  
  b8f51e80298f9c1dae9dff5cff19295d
- SHA1
  
  82568ea20cbd2888600a561decca8338e9e098ab
- SHA256
  
  2923289f78ccc0eefe7e54988b5ba323d92c69c178817e978667d69c4a8fc7e0
- SHA512
  
  6dd46d177361e3d58c330c5370995eb08b65801132983fd09d0af243294476166e87138dfd26072a613c5078570a8ef9e153ef4ddad3eb7a0173b5a34d52697a
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTXy:ZRpAyazIliazTi
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer