Overview

overview

7

Static

static

3

2024-04-27...re.exe

windows7-x64

7

2024-04-27...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-27_4f01fba0b2742fe348ea0c52e888bb9e_bkransomware

  • Size

    96KB

  • Sample

    240427-wsjgkaec6t

  • MD5

    4f01fba0b2742fe348ea0c52e888bb9e

  • SHA1

    c396e8a2bd755eabef9cb86c37e3cfced1d7b3bb

  • SHA256

    b5c21cc5d71bd5d0bf7a365e766be1ad4b5f589bfaa9962885018bdf0ef77141

  • SHA512

    0026bc70c8344c90dbcdce2304ccd420f7dc41978fa07bbc513077f309883e245850c35f3756951be2e9b20b1fbcefc2f888f5ac0c514e0e13074a1ab874e376

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTw/qI7r+rs+Yls24:ZhpAyazIlyazTw/q4r+124

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-27_4f01fba0b2742fe348ea0c52e888bb9e_bkransomware

    • Size

      96KB

    • MD5

      4f01fba0b2742fe348ea0c52e888bb9e

    • SHA1

      c396e8a2bd755eabef9cb86c37e3cfced1d7b3bb

    • SHA256

      b5c21cc5d71bd5d0bf7a365e766be1ad4b5f589bfaa9962885018bdf0ef77141

    • SHA512

      0026bc70c8344c90dbcdce2304ccd420f7dc41978fa07bbc513077f309883e245850c35f3756951be2e9b20b1fbcefc2f888f5ac0c514e0e13074a1ab874e376

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTw/qI7r+rs+Yls24:ZhpAyazIlyazTw/q4r+124

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks