General

  • Target

    2024-05-24_3c9678c47570bda372fe4cbf1ada27b0_bkransomware

  • Size

    174KB

  • Sample

    240524-r6blnahf7t

  • MD5

    3c9678c47570bda372fe4cbf1ada27b0

  • SHA1

    73f2169508b375edb826de5cd021f2abb7c55ac1

  • SHA256

    9cbbf6128aea94dc2dd0d45ca28ed6ef00efeef6ad92171731b28a82ad50a1eb

  • SHA512

    d98fb3fb02f99a5990f201c65b7fdebe72949300ca915551fb5f3158056f1a6e9d37eb285290af71905801af245f9279a2b54b8a3514bd9616ac6c51c1fc3e47

  • SSDEEP

    3072:ZRpAyazIliazT7GJS1G64ouNr8+4DpOUbROrw4MS9qwGI4XjWciDRN:xZ8az/+touNqDpOUArwWqRI8jWciDf

Malware Config

Targets

    • Target

      2024-05-24_3c9678c47570bda372fe4cbf1ada27b0_bkransomware

    • Size

      174KB

    • MD5

      3c9678c47570bda372fe4cbf1ada27b0

    • SHA1

      73f2169508b375edb826de5cd021f2abb7c55ac1

    • SHA256

      9cbbf6128aea94dc2dd0d45ca28ed6ef00efeef6ad92171731b28a82ad50a1eb

    • SHA512

      d98fb3fb02f99a5990f201c65b7fdebe72949300ca915551fb5f3158056f1a6e9d37eb285290af71905801af245f9279a2b54b8a3514bd9616ac6c51c1fc3e47

    • SSDEEP

      3072:ZRpAyazIliazT7GJS1G64ouNr8+4DpOUbROrw4MS9qwGI4XjWciDRN:xZ8az/+touNqDpOUArwWqRI8jWciDf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks