General

  • Target

    2024-04-28_cad021f345400c122e19931a7dc3cad0_bkransomware

  • Size

    1.6MB

  • Sample

    240428-w13v6seb3s

  • MD5

    cad021f345400c122e19931a7dc3cad0

  • SHA1

    7a06636fda874780f6ad16182f2c975b2fbfa95c

  • SHA256

    a9e4bd3153dc8486b8cf0bbfaaca4c05e5fa5cb7907e4e8483f54fa0610b5a85

  • SHA512

    bf1a3b7ac973b59aa876a6d6fc5776422ed42ddde5bd0347c38e80e2701e56195822584e5d4148bba1cd98039191842e14791f670818066efd573a2c0ace8dba

  • SSDEEP

    12288:WtOw6Baplns7QfMrqPgQN4yBITnMAzZZTyd7zaVgP/u:o6BpQfbnaTbz7Tc7/

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_cad021f345400c122e19931a7dc3cad0_bkransomware

    • Size

      1.6MB

    • MD5

      cad021f345400c122e19931a7dc3cad0

    • SHA1

      7a06636fda874780f6ad16182f2c975b2fbfa95c

    • SHA256

      a9e4bd3153dc8486b8cf0bbfaaca4c05e5fa5cb7907e4e8483f54fa0610b5a85

    • SHA512

      bf1a3b7ac973b59aa876a6d6fc5776422ed42ddde5bd0347c38e80e2701e56195822584e5d4148bba1cd98039191842e14791f670818066efd573a2c0ace8dba

    • SSDEEP

      12288:WtOw6Baplns7QfMrqPgQN4yBITnMAzZZTyd7zaVgP/u:o6BpQfbnaTbz7Tc7/

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks