General

  • Target

    2024-05-24_94823aafa112fe92e06b03233fbb4400_bkransomware

  • Size

    1.8MB

  • Sample

    240524-15djasdb96

  • MD5

    94823aafa112fe92e06b03233fbb4400

  • SHA1

    778308a91549289c3d113d4b5097d0281e3cdbb5

  • SHA256

    911dedb94945e5622a77b8c578b389d63bfe6ab1e926ad5909e479f10971ef6f

  • SHA512

    fbccf76d6a5242b29f31486a7cf221d45fa0043b9ed7920648d361ae384d6088f627517c286a94a3ad6cd894bd072640d7c6868b2162e1e5b55cb762e6efbea0

  • SSDEEP

    49152:TE19+ApwXk1QE1RzsEQPaxHNJgDUYmvFur31yAipQCtXxc0H:093wXmoKYU7dG1yfpVBlH

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_94823aafa112fe92e06b03233fbb4400_bkransomware

    • Size

      1.8MB

    • MD5

      94823aafa112fe92e06b03233fbb4400

    • SHA1

      778308a91549289c3d113d4b5097d0281e3cdbb5

    • SHA256

      911dedb94945e5622a77b8c578b389d63bfe6ab1e926ad5909e479f10971ef6f

    • SHA512

      fbccf76d6a5242b29f31486a7cf221d45fa0043b9ed7920648d361ae384d6088f627517c286a94a3ad6cd894bd072640d7c6868b2162e1e5b55cb762e6efbea0

    • SSDEEP

      49152:TE19+ApwXk1QE1RzsEQPaxHNJgDUYmvFur31yAipQCtXxc0H:093wXmoKYU7dG1yfpVBlH

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks