General

  • Target

    2024-04-29_efe7969d21c8557c72e22560e43d1e80_bkransomware

  • Size

    172KB

  • Sample

    240429-p31ehaba43

  • MD5

    efe7969d21c8557c72e22560e43d1e80

  • SHA1

    800fefea2b0b086b84cd735d7ea95a1209033f8d

  • SHA256

    1303d127e84d7a733997ec2ae6b9ef0d684fba84fd0e61cb56ddfad967cb9acb

  • SHA512

    faf51d5fa70f0edf47856ad29f20825c0737f1ab179270a4986efb39ac61a0593eba7236b855f6e6fb6d25fa692c77fcb713f78b7364abbab5fe03b3b8c87f11

  • SSDEEP

    3072:ZhpAyazIlyazTqZwSzqxLGD7iqD3QD5HZVkqi1i5CpUIkVj:hZMazuu9yD2qD3QD5rLbQsB

Malware Config

Targets

    • Target

      2024-04-29_efe7969d21c8557c72e22560e43d1e80_bkransomware

    • Size

      172KB

    • MD5

      efe7969d21c8557c72e22560e43d1e80

    • SHA1

      800fefea2b0b086b84cd735d7ea95a1209033f8d

    • SHA256

      1303d127e84d7a733997ec2ae6b9ef0d684fba84fd0e61cb56ddfad967cb9acb

    • SHA512

      faf51d5fa70f0edf47856ad29f20825c0737f1ab179270a4986efb39ac61a0593eba7236b855f6e6fb6d25fa692c77fcb713f78b7364abbab5fe03b3b8c87f11

    • SSDEEP

      3072:ZhpAyazIlyazTqZwSzqxLGD7iqD3QD5HZVkqi1i5CpUIkVj:hZMazuu9yD2qD3QD5rLbQsB

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks