6bba6e32701ddb7bc3a8d5945c570177694d2622d5f21eed6428ade8c15d2bd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-11_fe807fab296a3c9a3277ca8602970471_bkransomware
Size

71KB
Sample

240511-xkbmesfc34
MD5

fe807fab296a3c9a3277ca8602970471
SHA1

b88ad4e7e81f024d7cacdacb4294278e33101939
SHA256

6bba6e32701ddb7bc3a8d5945c570177694d2622d5f21eed6428ade8c15d2bd2
SHA512

3ab5a5caf60102efe51d3cb6412cf32e75206beabab9d15cf39d063eb680e0c1c5f2546362241b54aeb631cc9ac634ff4fb9303b96834e1c7c1b91ef69ca3bec
SSDEEP

1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT5:ZhpAyazIlyazT5

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-05-11_fe807fab296a3c9a3277ca8602970471_bkransomware
- Size
  
  71KB
- MD5
  
  fe807fab296a3c9a3277ca8602970471
- SHA1
  
  b88ad4e7e81f024d7cacdacb4294278e33101939
- SHA256
  
  6bba6e32701ddb7bc3a8d5945c570177694d2622d5f21eed6428ade8c15d2bd2
- SHA512
  
  3ab5a5caf60102efe51d3cb6412cf32e75206beabab9d15cf39d063eb680e0c1c5f2546362241b54aeb631cc9ac634ff4fb9303b96834e1c7c1b91ef69ca3bec
- SSDEEP
  
  1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT5:ZhpAyazIlyazT5
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer