354231d8e75a7165030fa6c1848c951ec97a433152ceda33cf08f5bf5b735495 | Triage

Sharing

General

Target

2024-05-03_c60633b6f6258e541247f48f68d5ec46_bkransomware
Size

96KB
Sample

240503-jcbessaa2z
MD5

c60633b6f6258e541247f48f68d5ec46
SHA1

e4d5deecfef7fb6a67ffcf4e1eef29c175f22543
SHA256

354231d8e75a7165030fa6c1848c951ec97a433152ceda33cf08f5bf5b735495
SHA512

c85bfe4ed794b55d26b684f028999a3dbe49ec7c16b26df565c68037f332a2512c42c43f9a7a894148ee299b9d9eee0e730091d0aff5ba768a1ef847c390f37a
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTcu2oIMorLjbentqCZ7:ZhpAyazIlyazTMU57

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-05-03_c60633b6f6258e541247f48f68d5ec46_bkransomware
- Size
  
  96KB
- MD5
  
  c60633b6f6258e541247f48f68d5ec46
- SHA1
  
  e4d5deecfef7fb6a67ffcf4e1eef29c175f22543
- SHA256
  
  354231d8e75a7165030fa6c1848c951ec97a433152ceda33cf08f5bf5b735495
- SHA512
  
  c85bfe4ed794b55d26b684f028999a3dbe49ec7c16b26df565c68037f332a2512c42c43f9a7a894148ee299b9d9eee0e730091d0aff5ba768a1ef847c390f37a
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTcu2oIMorLjbentqCZ7:ZhpAyazIlyazTMU57
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer