Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13-05-2024 11:55
General
-
Target
2024-05-13_f8e498f7ef91b38ba87895af95913fd1_bkransomware_buzus.exe
-
Size
1.3MB
-
MD5
f8e498f7ef91b38ba87895af95913fd1
-
SHA1
9e70434b62717fad45527dae2b59e88296a81ea8
-
SHA256
06c1a7cff1d032e3557a3787f9e633949d667d9e2d9ac8922ebc70d90e117d71
-
SHA512
fafc0a6c6e95b66a157bf4651fa8130fd41db04a66896027557f71e2ec4d930ce1c77b915adaaf8d2cbca7701d85b6af925f959a23b2a2efad000d96146f7249
-
SSDEEP
24576:/rKqlGCPcJKwybUDwEZZODYmR9G+gnbkk6XRJfe3DqYO/KpLwFfngWX4VmJPakx:/rKo4ZwCOnYjVmJPay
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 1 IoCs
-
Modifies Internet Explorer settings 1 TTPs 1 IoCs
-
Suspicious use of SetWindowsHookEx 5 IoCs
-
Suspicious use of WriteProcessMemory 11 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-13_f8e498f7ef91b38ba87895af95913fd1_bkransomware_buzus.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-13_f8e498f7ef91b38ba87895af95913fd1_bkransomware_buzus.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\2024-05-13_f8e498f7ef91b38ba87895af95913fd1_bkransomware_buzus.exe2⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
4KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB
-
Filesize
868KB