Overview

overview

7

Static

static

3

2024-05-23...re.exe

windows7-x64

7

2024-05-23...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_65e2428c08386a062e108655fada464e_bkransomware

  • Size

    712KB

  • Sample

    240523-knk9tabb42

  • MD5

    65e2428c08386a062e108655fada464e

  • SHA1

    05e36641c9b5bba57396294baf519a759d635778

  • SHA256

    7b1208620256627e9c80f6491ce469edfd453b1f8646824da1f8f8e07a4cbe5b

  • SHA512

    d8dbbcde2aff0c6c058fb1c4f94c1027179d74203e3a3af582a5760146ca7532dcb4e4c1c2b8b03b0c9c7150cc04e9781307e84a67db602462d0c797331525c1

  • SSDEEP

    12288:CtOw6BazXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:86BGsqjnhMgeiCl7G0nehbGZpbD

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-23_65e2428c08386a062e108655fada464e_bkransomware

    • Size

      712KB

    • MD5

      65e2428c08386a062e108655fada464e

    • SHA1

      05e36641c9b5bba57396294baf519a759d635778

    • SHA256

      7b1208620256627e9c80f6491ce469edfd453b1f8646824da1f8f8e07a4cbe5b

    • SHA512

      d8dbbcde2aff0c6c058fb1c4f94c1027179d74203e3a3af582a5760146ca7532dcb4e4c1c2b8b03b0c9c7150cc04e9781307e84a67db602462d0c797331525c1

    • SSDEEP

      12288:CtOw6BazXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:86BGsqjnhMgeiCl7G0nehbGZpbD

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks