General

  • Target

    2024-05-24_dc2086fa3c393b4e5f7189bf90bd6d55_bkransomware

  • Size

    1.8MB

  • Sample

    240524-xzmy1aga7t

  • MD5

    dc2086fa3c393b4e5f7189bf90bd6d55

  • SHA1

    6ad347cf0ee17811c5c549b176e694dc0fb75fdd

  • SHA256

    24bceb02eb8433fb61bb7833e98c8dd9da1fb3884c33b0dfb505a99607e34685

  • SHA512

    fbf0bb2a37454ce4ea9f5353d0e692791db670922424abfbc6dd5155d417182c83fa20b27945c26f55ad2b18924827ce22c00052360bf2158076296f1e3c584e

  • SSDEEP

    49152:JE19+ApwXk1QE1RzsEQPaxHNt65RjUV2Vo:693wXmoKl65tUV

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_dc2086fa3c393b4e5f7189bf90bd6d55_bkransomware

    • Size

      1.8MB

    • MD5

      dc2086fa3c393b4e5f7189bf90bd6d55

    • SHA1

      6ad347cf0ee17811c5c549b176e694dc0fb75fdd

    • SHA256

      24bceb02eb8433fb61bb7833e98c8dd9da1fb3884c33b0dfb505a99607e34685

    • SHA512

      fbf0bb2a37454ce4ea9f5353d0e692791db670922424abfbc6dd5155d417182c83fa20b27945c26f55ad2b18924827ce22c00052360bf2158076296f1e3c584e

    • SSDEEP

      49152:JE19+ApwXk1QE1RzsEQPaxHNt65RjUV2Vo:693wXmoKl65tUV

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks