General

  • Target

    2024-05-04_f7c902457767767088c93376ed5f6cad_bkransomware

  • Size

    144KB

  • Sample

    240504-zjznzaag7w

  • MD5

    f7c902457767767088c93376ed5f6cad

  • SHA1

    6eaf7ba972b42b714a88846c8670424cf6d3075c

  • SHA256

    5093c8916daf1e738551351266da6d280e2cf8a2c337d38300ec5d9c75417ea9

  • SHA512

    dbdc8cad07519f88eece3b09e0045d392df760d1aafb3003ec5bff4450bff9873e1a08578e587c0a45ca19f04c1efc3ae3affeb9a8fa8707e7a7a4f8a57a9620

  • SSDEEP

    3072:ZhpAyazIlyazTkfklOd+kOPbvMwPPAbNp:hZMazo8lE+TPbnwp

Malware Config

Targets

    • Target

      2024-05-04_f7c902457767767088c93376ed5f6cad_bkransomware

    • Size

      144KB

    • MD5

      f7c902457767767088c93376ed5f6cad

    • SHA1

      6eaf7ba972b42b714a88846c8670424cf6d3075c

    • SHA256

      5093c8916daf1e738551351266da6d280e2cf8a2c337d38300ec5d9c75417ea9

    • SHA512

      dbdc8cad07519f88eece3b09e0045d392df760d1aafb3003ec5bff4450bff9873e1a08578e587c0a45ca19f04c1efc3ae3affeb9a8fa8707e7a7a4f8a57a9620

    • SSDEEP

      3072:ZhpAyazIlyazTkfklOd+kOPbvMwPPAbNp:hZMazo8lE+TPbnwp

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks