c9add5f52d3c90de60ecc20adae785df207a145d476ee19f8017c3102b15a8ac | Triage

Sharing

General

Target

2024-04-28_3c1774b6875cdd2898e01e5113914799_bkransomware
Size

71KB
Sample

240428-r34g9saa85
MD5

3c1774b6875cdd2898e01e5113914799
SHA1

0810587111690bb8d8063f2bcdaa5f290572bced
SHA256

c9add5f52d3c90de60ecc20adae785df207a145d476ee19f8017c3102b15a8ac
SHA512

288926c623fad2dbc425379daccaa70dd35715dfd68efa5fde69fe061765aa8d64ed305eb61d752fae28d232d820a8f5f5139046482d1b87c98fadd4d95f4224
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT7:ZhpAyazIlyazT7

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-04-28_3c1774b6875cdd2898e01e5113914799_bkransomware
- Size
  
  71KB
- MD5
  
  3c1774b6875cdd2898e01e5113914799
- SHA1
  
  0810587111690bb8d8063f2bcdaa5f290572bced
- SHA256
  
  c9add5f52d3c90de60ecc20adae785df207a145d476ee19f8017c3102b15a8ac
- SHA512
  
  288926c623fad2dbc425379daccaa70dd35715dfd68efa5fde69fe061765aa8d64ed305eb61d752fae28d232d820a8f5f5139046482d1b87c98fadd4d95f4224
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT7:ZhpAyazIlyazT7
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer