Overview

overview

7

Static

static

3

2024-04-28...re.exe

windows7-x64

7

2024-04-28...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-04-28_aaff51e8ad9a6d0808effc44dd050551_bkransomware

  • Size

    1.8MB

  • Sample

    240428-v2m1nscg86

  • MD5

    aaff51e8ad9a6d0808effc44dd050551

  • SHA1

    de621b359873091436b61bf79c4f4e4349b84415

  • SHA256

    19baade6009a67e6945f6502fe52f9e3356d264d956b9a80de787936675dcff2

  • SHA512

    7d25edd0324e1d3bfc72c1f3aac87ae3e6ff804fe5479b3b6d76d95532b32a0be639e18b425f48cd4be2933bba4f5012b58fee8872d016498c17ceaf999c53a2

  • SSDEEP

    49152:GEy9+ApwXk1QE1RzsEQPaxHN2Dmg27RnWGj:w93wXmoKeD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-04-28_aaff51e8ad9a6d0808effc44dd050551_bkransomware

    • Size

      1.8MB

    • MD5

      aaff51e8ad9a6d0808effc44dd050551

    • SHA1

      de621b359873091436b61bf79c4f4e4349b84415

    • SHA256

      19baade6009a67e6945f6502fe52f9e3356d264d956b9a80de787936675dcff2

    • SHA512

      7d25edd0324e1d3bfc72c1f3aac87ae3e6ff804fe5479b3b6d76d95532b32a0be639e18b425f48cd4be2933bba4f5012b58fee8872d016498c17ceaf999c53a2

    • SSDEEP

      49152:GEy9+ApwXk1QE1RzsEQPaxHN2Dmg27RnWGj:w93wXmoKeD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks