Overview

overview

7

Static

static

3

2024-04-28...re.exe

windows7-x64

7

2024-04-28...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_f51d639c5486aa1f8e3efc5687dfa1e7_bkransomware

  • Size

    71KB

  • Sample

    240428-b7v4pade28

  • MD5

    f51d639c5486aa1f8e3efc5687dfa1e7

  • SHA1

    5bd3a24b3adbba0a9020d71fa4470d230348c72e

  • SHA256

    634104ece30c02e7c436b68fc397295569ef69b9e8c76d353b000181423bb7bf

  • SHA512

    32f92021bfe82f421bfed0ade5d5a7bc2e6f2626ae4d7959ab28e0da8d9ef8aea7948bdb0badd87a9ab2e59aa8c1340ab09dc050d7cd586ad2816b11520a6645

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTFL:ZRpAyazIliazTFL

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-28_f51d639c5486aa1f8e3efc5687dfa1e7_bkransomware

    • Size

      71KB

    • MD5

      f51d639c5486aa1f8e3efc5687dfa1e7

    • SHA1

      5bd3a24b3adbba0a9020d71fa4470d230348c72e

    • SHA256

      634104ece30c02e7c436b68fc397295569ef69b9e8c76d353b000181423bb7bf

    • SHA512

      32f92021bfe82f421bfed0ade5d5a7bc2e6f2626ae4d7959ab28e0da8d9ef8aea7948bdb0badd87a9ab2e59aa8c1340ab09dc050d7cd586ad2816b11520a6645

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTFL:ZRpAyazIliazTFL

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks