Overview

overview

7

Static

static

3

2024-05-27...re.exe

windows7-x64

7

2024-05-27...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-27_0fcf79baf17baa3ac25f299a4e002e37_bkransomware

  • Size

    1.8MB

  • Sample

    240527-wc1qxaca8y

  • MD5

    0fcf79baf17baa3ac25f299a4e002e37

  • SHA1

    543e01b68cc20367241d8bad9ad5a8ac6893215d

  • SHA256

    81e55c31ff9027ef7526d9d922887c47dbf0fefdb3ff7105c6dbe5d11bca75bb

  • SHA512

    225ed7a10fba0aef2ca5681702f822c7e719ee8eebce0804a711d93ee69ecfbfb1c3b755ea647a8472d7ffeac009acfa1645dfbfb6e425569a13e3bcea7ca8ee

  • SSDEEP

    49152:zE19+ApwXk1QE1RzsEQPaxHNlpAHrVQ1/fSNvi:U93wXmoKtpAhQ1CNvi

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-27_0fcf79baf17baa3ac25f299a4e002e37_bkransomware

    • Size

      1.8MB

    • MD5

      0fcf79baf17baa3ac25f299a4e002e37

    • SHA1

      543e01b68cc20367241d8bad9ad5a8ac6893215d

    • SHA256

      81e55c31ff9027ef7526d9d922887c47dbf0fefdb3ff7105c6dbe5d11bca75bb

    • SHA512

      225ed7a10fba0aef2ca5681702f822c7e719ee8eebce0804a711d93ee69ecfbfb1c3b755ea647a8472d7ffeac009acfa1645dfbfb6e425569a13e3bcea7ca8ee

    • SSDEEP

      49152:zE19+ApwXk1QE1RzsEQPaxHNlpAHrVQ1/fSNvi:U93wXmoKtpAhQ1CNvi

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks