General

  • Target

    2024-04-28_982e2d80678e1fdd05c1eb1abc36b647_bkransomware

  • Size

    1.9MB

  • Sample

    240428-xslglaef65

  • MD5

    982e2d80678e1fdd05c1eb1abc36b647

  • SHA1

    2c2359c1dfee74d74ee98ff9d869b076b7a69763

  • SHA256

    ca0929bfdd2e09d8a33df3e5b81e2dc85ed79b96d67822610013927b5a5b5112

  • SHA512

    2a7f3c4d65d5d6cd0c99e80bfd9d9ce158956864b8666c87763c0700adfd63c75e6fb9dc02a8cab489812211298e6635bf61f263b0d9cda7acc613e609d7b265

  • SSDEEP

    12288:v2lWRPfhA9PRWg9vmqmFrfBCgiw4bivhqGoj85sVPL5qw+DmQ:v2lmf4RKqMrfUgYbkhqfj8uqwp

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_982e2d80678e1fdd05c1eb1abc36b647_bkransomware

    • Size

      1.9MB

    • MD5

      982e2d80678e1fdd05c1eb1abc36b647

    • SHA1

      2c2359c1dfee74d74ee98ff9d869b076b7a69763

    • SHA256

      ca0929bfdd2e09d8a33df3e5b81e2dc85ed79b96d67822610013927b5a5b5112

    • SHA512

      2a7f3c4d65d5d6cd0c99e80bfd9d9ce158956864b8666c87763c0700adfd63c75e6fb9dc02a8cab489812211298e6635bf61f263b0d9cda7acc613e609d7b265

    • SSDEEP

      12288:v2lWRPfhA9PRWg9vmqmFrfBCgiw4bivhqGoj85sVPL5qw+DmQ:v2lmf4RKqMrfUgYbkhqfj8uqwp

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks