Overview

overview

9

Static

static

3

2024-04-30...re.exe

windows7-x64

7

2024-04-30...re.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-30_0a4907deee9bb531a27a984e5fc0c4db_bkransomware

  • Size

    214KB

  • Sample

    240430-mtdg9sae3s

  • MD5

    0a4907deee9bb531a27a984e5fc0c4db

  • SHA1

    2a5ba80b114e1cc277aaa6416398008f4e1b3721

  • SHA256

    f094a68b8d1551d455a85f076e6cabf0aa12f115c7dc22dee74a543e4b6988b9

  • SHA512

    d1272493b4e9c409c6c59e202d50a0f4fee24ef548055e7e2208f1f49d121351ba99d24eefba324f577efd7ad10c56307b64e2dcd8c3a4f08fc907315251dcd4

  • SSDEEP

    6144:xZ8az1s6cfkMzwhK15ivWBWOIEFW7bR78P:xC01O1wYFoEFsaP

Score
9/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-30_0a4907deee9bb531a27a984e5fc0c4db_bkransomware

    • Size

      214KB

    • MD5

      0a4907deee9bb531a27a984e5fc0c4db

    • SHA1

      2a5ba80b114e1cc277aaa6416398008f4e1b3721

    • SHA256

      f094a68b8d1551d455a85f076e6cabf0aa12f115c7dc22dee74a543e4b6988b9

    • SHA512

      d1272493b4e9c409c6c59e202d50a0f4fee24ef548055e7e2208f1f49d121351ba99d24eefba324f577efd7ad10c56307b64e2dcd8c3a4f08fc907315251dcd4

    • SSDEEP

      6144:xZ8az1s6cfkMzwhK15ivWBWOIEFW7bR78P:xC01O1wYFoEFsaP

    Score
    9/10
    persistencespywarestealer

    • Detects executables containing bas64 encoded gzip files

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks