Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
24-05-2024 11:43
General
-
Target
2024-05-24_0079a5dbc66132b89962f01d25797e34_bkransomware.exe
-
Size
1.6MB
-
MD5
0079a5dbc66132b89962f01d25797e34
-
SHA1
5090ce39c8c0c79d473250360963fcd085822eaa
-
SHA256
223507ecbdb911994c72e2f91f5fdfe64d4c9508a4d939a20606776bd926460b
-
SHA512
e99f20d7a944a533b47d7d46a2caf945cd4d84bb2eb2164b6987ca3241656d2e28fa802d69d3086cb3ead0f53ce6409e96132fbc8c057d314350e98e2178dea1
-
SSDEEP
12288:H2lWRPDhA9PRWg9WUVpyNj3C/Ei9OQSt6uk3zO61zOQJjN6atJ6bVgwtZJz:H2lmD4RSUMj3C/Uvw3B8atQVpZJ
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-24_0079a5dbc66132b89962f01d25797e34_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-24_0079a5dbc66132b89962f01d25797e34_bkransomware.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.3MB
MD52ee21e94bdf4dc57861bc50b5cb58fb4
SHA15143bb2217fc4e39c909989a6f1b9d63f6d670c9
SHA25613cfc73cfbde792d6a0880aa1450dac9932804e0d9edb2e68fba6dd3c7c268a0
SHA512a2d1cb2a96d872e1ba6031f35f19ec7910f3c0744876e92c62ce3e27f12212eea2d656f0dfa51884067b0369cc73fc8644a0ee66c22e9287de3514490952f3f5
-
Filesize
1.7MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.7MB
-
Filesize
1.3MB
-
Filesize
1.3MB