Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
14-05-2024 17:49
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe
-
Size
4.4MB
-
MD5
26fd2844b90f2a0e6b05e83fb15af22c
-
SHA1
fdd01752a5702dc9bd8bb536954df79200ed6358
-
SHA256
62f58df36d2801afa848847b69b9dfc27002fe1064f7ef2c9f00f1c1d4942eec
-
SHA512
c540cd02a4aef70ac118b24299e133c04846e3960a776a4576b2507f8cea4fa40106993a053f6ab5a7042a9e39e3e5043db82b5089c188fced479f45b57f7971
-
SSDEEP
98304:bdIXBJLzrjp3lBMdUmOYp9UCPKXoMQaMl6Tr7S4roRVDwmFsRFjiw1ese4g44gW8:b0/Lp3gdUmOYp9UCPKXoMQaMl6Tr7S45
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2052 2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 2052 2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2052 2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe 2052 2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-14_26fd2844b90f2a0e6b05e83fb15af22c_bkransomware.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2052