Overview

overview

7

Static

static

3

2024-04-28...re.exe

windows7-x64

7

2024-04-28...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_59e8c5a0d6f839d9c75124d2e183ff0f_bkransomware

  • Size

    176KB

  • Sample

    240428-e77dhage4v

  • MD5

    59e8c5a0d6f839d9c75124d2e183ff0f

  • SHA1

    105c931079c9596eb01c1366f38fac2b2f5deff7

  • SHA256

    d2cd33bdabafa29fb4c3fa2da8265a37014d155d40076b1c0ae3ff98fe613650

  • SHA512

    19e0cde2aee3da971a4cf5f98790225f1c6c29eca2e6cd6374e636d3db7b3c5466f0bc07e37191fa78a928e7ffb7a7c118f91947f3bc55004f53f36def170330

  • SSDEEP

    3072:ZRpAyazIliazTtRUZpiSVDS4+3RHNfWpStUc///+7Ks:xZ8az3spiSVr+xlOWof

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-28_59e8c5a0d6f839d9c75124d2e183ff0f_bkransomware

    • Size

      176KB

    • MD5

      59e8c5a0d6f839d9c75124d2e183ff0f

    • SHA1

      105c931079c9596eb01c1366f38fac2b2f5deff7

    • SHA256

      d2cd33bdabafa29fb4c3fa2da8265a37014d155d40076b1c0ae3ff98fe613650

    • SHA512

      19e0cde2aee3da971a4cf5f98790225f1c6c29eca2e6cd6374e636d3db7b3c5466f0bc07e37191fa78a928e7ffb7a7c118f91947f3bc55004f53f36def170330

    • SSDEEP

      3072:ZRpAyazIliazTtRUZpiSVDS4+3RHNfWpStUc///+7Ks:xZ8az3spiSVr+xlOWof

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks