General

  • Target

    2024-05-24_d66a417b4ae966f5e3a6eb01b54f8d77_bkransomware

  • Size

    1.8MB

  • Sample

    240524-15zfrsdc34

  • MD5

    d66a417b4ae966f5e3a6eb01b54f8d77

  • SHA1

    7991a55a59ea8e1b6eb1b1644b79db50aa92d712

  • SHA256

    231d8a8a4c9b3442be45aebc329948a106b1be9318e89313063403314f4b5fd5

  • SHA512

    6db07e6cf2286c7d68bc7dfcd3e634fd26c25efe72daa5e43a5775f4c596ac1b5c1051e6778172d1eea0fb7bb8fa93fc56c5f36676cd6e8b1487c1a68514e472

  • SSDEEP

    24576:R2lmA4RSgPvod50p/TXM2s0espsODZjB0IP:R2MA4RS0vo05s0eusONlP

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_d66a417b4ae966f5e3a6eb01b54f8d77_bkransomware

    • Size

      1.8MB

    • MD5

      d66a417b4ae966f5e3a6eb01b54f8d77

    • SHA1

      7991a55a59ea8e1b6eb1b1644b79db50aa92d712

    • SHA256

      231d8a8a4c9b3442be45aebc329948a106b1be9318e89313063403314f4b5fd5

    • SHA512

      6db07e6cf2286c7d68bc7dfcd3e634fd26c25efe72daa5e43a5775f4c596ac1b5c1051e6778172d1eea0fb7bb8fa93fc56c5f36676cd6e8b1487c1a68514e472

    • SSDEEP

      24576:R2lmA4RSgPvod50p/TXM2s0espsODZjB0IP:R2MA4RS0vo05s0eusONlP

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks