General

  • Target

    2024-05-24_135ecd9629aaf6ade5b24eabffc12913_bkransomware

  • Size

    1017KB

  • Sample

    240524-tw7mfscc29

  • MD5

    135ecd9629aaf6ade5b24eabffc12913

  • SHA1

    2c01092017f250cbf10de1f127ded183558e8ae7

  • SHA256

    828839f161b264414a595b666347fd55157c4e37b5f181f60c17943164d5695a

  • SHA512

    76d79704513d830e2421e15931559fb1ed198e257f0d28037ce5d9cc5a7712d3e016fa28f3c3c78f8478a8c529177710f15d99b258525fdc04b20ec48dab136c

  • SSDEEP

    12288:d2lWRPhhA9PRWg9b6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:d2lmh4R36J17W8CX32+KJNA80T

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_135ecd9629aaf6ade5b24eabffc12913_bkransomware

    • Size

      1017KB

    • MD5

      135ecd9629aaf6ade5b24eabffc12913

    • SHA1

      2c01092017f250cbf10de1f127ded183558e8ae7

    • SHA256

      828839f161b264414a595b666347fd55157c4e37b5f181f60c17943164d5695a

    • SHA512

      76d79704513d830e2421e15931559fb1ed198e257f0d28037ce5d9cc5a7712d3e016fa28f3c3c78f8478a8c529177710f15d99b258525fdc04b20ec48dab136c

    • SSDEEP

      12288:d2lWRPhhA9PRWg9b6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:d2lmh4R36J17W8CX32+KJNA80T

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks