Overview

overview

10

Static

static

10

2024-05-26...re.exe

windows7-x64

9

2024-05-26...re.exe

windows10-2004-x64

9

Analysis

  • max time kernel
    142s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/05/2024, 03:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2024-05-26_16506a2cbc7ce8155955e4c06dd2b563_bkransomware.exe
  • Size 5.5MB
  • Sample240526-ear8baed75
  • SHA256 410e691df55b358ad5d1e93bf7d78aa7e9fdb8e55c1c462aec46ebe151719ef2
  • MD5 SHA1 SHA512 SSDEEP
Score
9/10

Malware Config

Signatures

  • Detects executables packed with VMProtect. 2 IoCs
  • Loads dropped DLL 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-26_16506a2cbc7ce8155955e4c06dd2b563_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-26_16506a2cbc7ce8155955e4c06dd2b563_bkransomware.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    PID:4616
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4340 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:3656

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          TApi.dll
          • Path C:\Users\Admin\AppData\Local\Temp\4616e587896\TApi.dll
          • Size 3.2MB
          • SHA256 4f95a3111cea17b9c12126ea437d42143b612cd74847a29dca175bafd2a7d3f3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          TLib.dll
          • Path C:\Users\Admin\AppData\Local\Temp\4616e587896\TLib.dll
          • Size 1.3MB
          • SHA256 422b2f9bbd5f6c1c49a0e996821c7737dc47064b0fdf7dbb122a177cbc05ba6b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          t_baibaoyun_win32.dll
          • Path C:\Users\Admin\AppData\Local\Temp\4616e587896\t_baibaoyun_win32.dll
          • Size 1.2MB
          • SHA256 2f422a4ed4bec519c8840436cabaffe2ef4244630829ba1ebb3b806a871cb26f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download