General

  • Target

    2024-05-21_1bbc8015bc30c4e9508bc92c84357be8_bkransomware

  • Size

    1.8MB

  • Sample

    240521-t1fpjabh4v

  • MD5

    1bbc8015bc30c4e9508bc92c84357be8

  • SHA1

    bb16732899c8f09b0311ab7cdeef314af3b89acd

  • SHA256

    0a1c56ed50e2500a355ac6b394f8342018ca931a7010b27c3a2590686919b0f4

  • SHA512

    77ca74d05662667da0923142b3af665ee7cff31644ba92c6bbd0b2621be6459ec80fb23a00d6dee2f65f9e5e1876582aed311a2db8be171d1d25d2187786b720

  • SSDEEP

    49152:SE19+ApwXk1QE1RzsEQPaxHNlkQ/qoLEw:393wXmoKNqo4w

Score
7/10

Malware Config

Targets

    • Target

      2024-05-21_1bbc8015bc30c4e9508bc92c84357be8_bkransomware

    • Size

      1.8MB

    • MD5

      1bbc8015bc30c4e9508bc92c84357be8

    • SHA1

      bb16732899c8f09b0311ab7cdeef314af3b89acd

    • SHA256

      0a1c56ed50e2500a355ac6b394f8342018ca931a7010b27c3a2590686919b0f4

    • SHA512

      77ca74d05662667da0923142b3af665ee7cff31644ba92c6bbd0b2621be6459ec80fb23a00d6dee2f65f9e5e1876582aed311a2db8be171d1d25d2187786b720

    • SSDEEP

      49152:SE19+ApwXk1QE1RzsEQPaxHNlkQ/qoLEw:393wXmoKNqo4w

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks