709fda5f67ce10774ba93082410e662ed6491deda7d9a7c83460a739a841a43e | Triage

Sharing

General

Target

2024-05-06_4ce9f9fd9985d4f4613173bbfb8c7c89_bkransomware
Size

71KB
Sample

240506-3c5s7aba92
MD5

4ce9f9fd9985d4f4613173bbfb8c7c89
SHA1

34bcfe0d4077a4075604199b1b59eb5b6c869b19
SHA256

709fda5f67ce10774ba93082410e662ed6491deda7d9a7c83460a739a841a43e
SHA512

407ecbc8afcc6266265f6d813afe414c68f700ddb879c3d0bec1c5e68edbab868028ab17285e24fe1990351aaa99bcc23b45061c8a2c2a78866106c70823799d
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTP:ZRpAyazIliazTP

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-05-06_4ce9f9fd9985d4f4613173bbfb8c7c89_bkransomware
- Size
  
  71KB
- MD5
  
  4ce9f9fd9985d4f4613173bbfb8c7c89
- SHA1
  
  34bcfe0d4077a4075604199b1b59eb5b6c869b19
- SHA256
  
  709fda5f67ce10774ba93082410e662ed6491deda7d9a7c83460a739a841a43e
- SHA512
  
  407ecbc8afcc6266265f6d813afe414c68f700ddb879c3d0bec1c5e68edbab868028ab17285e24fe1990351aaa99bcc23b45061c8a2c2a78866106c70823799d
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTP:ZRpAyazIliazTP
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer