Overview

overview

7

Static

static

3

2024-04-28...re.exe

windows7-x64

7

2024-04-28...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_88418d70b2d47bf926cb1ae0e1a22630_bkransomware

  • Size

    332KB

  • Sample

    240428-d8wsqaff5x

  • MD5

    88418d70b2d47bf926cb1ae0e1a22630

  • SHA1

    1b29961fba93dad90ee9b67a18a5827bdf254a73

  • SHA256

    b8821b04205634de7defb29d4e2d1c212b35043177cea00c07b2f1284734991a

  • SHA512

    d617ad22b055df21d4cc5020652f5a3e77af859f314f38cc589a49c74b04313ef63501c2b3d2a37a67a51a5c27504895c595d73d813ae6eea09ef902862d1ac0

  • SSDEEP

    6144:hZMazt7P9IZWPIa5VTKpwL4Pz6w5Bt3I3j7r1S5lVZ7tpzk1oyb+boVyZY18DX1G:hS0tr95Ia5mws6w5Bt3I3jn1Sr3zYbY4

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-28_88418d70b2d47bf926cb1ae0e1a22630_bkransomware

    • Size

      332KB

    • MD5

      88418d70b2d47bf926cb1ae0e1a22630

    • SHA1

      1b29961fba93dad90ee9b67a18a5827bdf254a73

    • SHA256

      b8821b04205634de7defb29d4e2d1c212b35043177cea00c07b2f1284734991a

    • SHA512

      d617ad22b055df21d4cc5020652f5a3e77af859f314f38cc589a49c74b04313ef63501c2b3d2a37a67a51a5c27504895c595d73d813ae6eea09ef902862d1ac0

    • SSDEEP

      6144:hZMazt7P9IZWPIa5VTKpwL4Pz6w5Bt3I3j7r1S5lVZ7tpzk1oyb+boVyZY18DX1G:hS0tr95Ia5mws6w5Bt3I3jn1Sr3zYbY4

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks