Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
24-05-2024 16:26
General
-
Target
2024-05-24_18c78dfc24bb49d3ee22177bfef0805c_bkransomware.exe
-
Size
1.9MB
-
MD5
18c78dfc24bb49d3ee22177bfef0805c
-
SHA1
50f25b75197d5e5117be139ca8c3553c4fd0092f
-
SHA256
32b051163c443fa5fded1a8855e5ad9da9837f4c6afe2c4ff7d0f2f79bf41b8f
-
SHA512
e4470ae213b7c9f7095f9e2d72a5f6a79550a5d13cf7819ebcf8a2aaedf008fb8611af28b2a784767e5616c39783840e7df25a1e156182306e118babcbeebe1f
-
SSDEEP
24576:B2lmh4RRX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:B2Mh4RRXvYMLprznyDSga9
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-24_18c78dfc24bb49d3ee22177bfef0805c_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-24_18c78dfc24bb49d3ee22177bfef0805c_bkransomware.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1708-0-0x0000000000400000-0x00000000006C5000-memory.dmpFilesize
2.8MB
-
memory/1708-6-0x00000000002F0000-0x0000000000357000-memory.dmpFilesize
412KB
-
memory/1708-1-0x00000000002F0000-0x0000000000357000-memory.dmpFilesize
412KB
-
memory/1708-11-0x0000000000400000-0x00000000006C5000-memory.dmpFilesize
2.8MB