9d8ac43c89390d60904513289aa985a30145b1ae7f6294d9113f5a2576633b8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-04_0cfb606ed0978bb5dae9ea6b4988141a_bkransomware
Size

74KB
Sample

240504-dxqgkaeh77
MD5

0cfb606ed0978bb5dae9ea6b4988141a
SHA1

3fbe4b7f602bb712c7caae65e44cc843e2ae40e1
SHA256

9d8ac43c89390d60904513289aa985a30145b1ae7f6294d9113f5a2576633b8a
SHA512

7b1859a13775537b67e30dea0bb6a11b805afd5a8dc0ab0aad5f6c155adcb485fb9c0d19f8818668ed365a912bb32eb7307d7fe1ee2c708e7fadb645e3c91c2b
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT2:ZhpAyazIlyazT2

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-05-04_0cfb606ed0978bb5dae9ea6b4988141a_bkransomware
- Size
  
  74KB
- MD5
  
  0cfb606ed0978bb5dae9ea6b4988141a
- SHA1
  
  3fbe4b7f602bb712c7caae65e44cc843e2ae40e1
- SHA256
  
  9d8ac43c89390d60904513289aa985a30145b1ae7f6294d9113f5a2576633b8a
- SHA512
  
  7b1859a13775537b67e30dea0bb6a11b805afd5a8dc0ab0aad5f6c155adcb485fb9c0d19f8818668ed365a912bb32eb7307d7fe1ee2c708e7fadb645e3c91c2b
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT2:ZhpAyazIlyazT2
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer