Overview

overview

7

Static

static

3

2024-04-30...re.exe

windows7-x64

7

2024-04-30...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-04-30_5e9a210de132d5ff03cbbd4181821867_bkransomware

  • Size

    214KB

  • Sample

    240430-xcr97sdc61

  • MD5

    5e9a210de132d5ff03cbbd4181821867

  • SHA1

    705a963b3d11fbf110cd31376d32f0ef79184237

  • SHA256

    786981c2a801dd88621a7b4b5a871a128ade558041603ae4d419656f94c2c7db

  • SHA512

    7741f86a148fba31130d3ceac25b333c520dde7a755e3cace6efd967eb3236880aa96e6d0addfdd9c23e95efed50717c628db87f6c0db2dc72a1012f7b50c1d0

  • SSDEEP

    3072:ZRpAyazIliazTN3LaSGGNRI6szCC1u60iAWbBvxI3q3kWz4jngVTay0hhTP:xZ8azZ3LaeRIJU6Nbvitg4dhx

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-04-30_5e9a210de132d5ff03cbbd4181821867_bkransomware

    • Size

      214KB

    • MD5

      5e9a210de132d5ff03cbbd4181821867

    • SHA1

      705a963b3d11fbf110cd31376d32f0ef79184237

    • SHA256

      786981c2a801dd88621a7b4b5a871a128ade558041603ae4d419656f94c2c7db

    • SHA512

      7741f86a148fba31130d3ceac25b333c520dde7a755e3cace6efd967eb3236880aa96e6d0addfdd9c23e95efed50717c628db87f6c0db2dc72a1012f7b50c1d0

    • SSDEEP

      3072:ZRpAyazIliazTN3LaSGGNRI6szCC1u60iAWbBvxI3q3kWz4jngVTay0hhTP:xZ8azZ3LaeRIJU6Nbvitg4dhx

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks