Overview

overview

7

Static

static

3

2024-05-14...re.exe

windows7-x64

7

2024-05-14...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-14_bea8900667c2c8b68971ea5b44b6c17a_bkransomware

  • Size

    168KB

  • Sample

    240514-mtfbvscd4w

  • MD5

    bea8900667c2c8b68971ea5b44b6c17a

  • SHA1

    29a847fe290723dd893f147829d47c6f1c36efa6

  • SHA256

    38dd06ab3a27af090c3963b34944df6db726be55298bc7c84a4d6fee61eb1daf

  • SHA512

    6e541f1d276bb47179cf43a2026cdf0f34db6eaa7fa27b74ba40e8712037d151042495e99e51d1b1f4cc3d14bd703b2b6c915e0ccee01eb6fe64b6b18c979160

  • SSDEEP

    3072:ZRpAyazIliazTnjybskVaXQnoKvJOPFbQ1MMDRepoDejPLLu7:xZ8azbjy3agnov1Q6PaKT/U

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-05-14_bea8900667c2c8b68971ea5b44b6c17a_bkransomware

    • Size

      168KB

    • MD5

      bea8900667c2c8b68971ea5b44b6c17a

    • SHA1

      29a847fe290723dd893f147829d47c6f1c36efa6

    • SHA256

      38dd06ab3a27af090c3963b34944df6db726be55298bc7c84a4d6fee61eb1daf

    • SHA512

      6e541f1d276bb47179cf43a2026cdf0f34db6eaa7fa27b74ba40e8712037d151042495e99e51d1b1f4cc3d14bd703b2b6c915e0ccee01eb6fe64b6b18c979160

    • SSDEEP

      3072:ZRpAyazIliazTnjybskVaXQnoKvJOPFbQ1MMDRepoDejPLLu7:xZ8azbjy3agnov1Q6PaKT/U

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks