86805250481735be13a1d9737c337c1e533cc789469384de70629d981e73835c | Triage

Sharing

General

Target

2024-05-10_fe784ec317f1189ca21a54ed613ecf95_bkransomware
Size

71KB
Sample

240510-qbvklsbd36
MD5

fe784ec317f1189ca21a54ed613ecf95
SHA1

82114288d6aa8d8a5dad72643b7b05164686d36a
SHA256

86805250481735be13a1d9737c337c1e533cc789469384de70629d981e73835c
SHA512

7d48543ab22bcf0e9be2d5f9c4350afe8ca05ee6f8b73168cff14bd7dea0a19286fde73c24bb1c40e873cc4d0887c29ec637b9ccba39583fc6c1eabd901436b4
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT1:ZhpAyazIlyazT1

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-05-10_fe784ec317f1189ca21a54ed613ecf95_bkransomware
- Size
  
  71KB
- MD5
  
  fe784ec317f1189ca21a54ed613ecf95
- SHA1
  
  82114288d6aa8d8a5dad72643b7b05164686d36a
- SHA256
  
  86805250481735be13a1d9737c337c1e533cc789469384de70629d981e73835c
- SHA512
  
  7d48543ab22bcf0e9be2d5f9c4350afe8ca05ee6f8b73168cff14bd7dea0a19286fde73c24bb1c40e873cc4d0887c29ec637b9ccba39583fc6c1eabd901436b4
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT1:ZhpAyazIlyazT1
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer