Overview

overview

7

Static

static

3

2024-05-28...re.exe

windows7-x64

7

2024-05-28...re.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-28_0e5fa55249be46beaffc7eb9b6100b78_bkransomware

  • Size

    712KB

  • Sample

    240528-a4pxtsgb6x

  • MD5

    0e5fa55249be46beaffc7eb9b6100b78

  • SHA1

    a6a7dac2165b38d8126dde16d9cf4b2ec5aa5b09

  • SHA256

    eea3e2e9428a22c764024abb90080b2968ff1a1222314b2606f441cb45cfb259

  • SHA512

    7824923e9ee7c877494945499355560d58ff895c5ec1bba11824b92d21d4c6eb24eb2fd72235a70558eacf0250e95cb0986282cb0f172ef87af2c765b6e7762a

  • SSDEEP

    12288:OtOw6BaN6FggLbrQXbR7jqkf1Hm7tJc0FS3jicGWVSI7dMua43Ek0cIHAN4:A6B26LaRFdGJm0Q3WKVSwdr13Ek0VA

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2024-05-28_0e5fa55249be46beaffc7eb9b6100b78_bkransomware

    • Size

      712KB

    • MD5

      0e5fa55249be46beaffc7eb9b6100b78

    • SHA1

      a6a7dac2165b38d8126dde16d9cf4b2ec5aa5b09

    • SHA256

      eea3e2e9428a22c764024abb90080b2968ff1a1222314b2606f441cb45cfb259

    • SHA512

      7824923e9ee7c877494945499355560d58ff895c5ec1bba11824b92d21d4c6eb24eb2fd72235a70558eacf0250e95cb0986282cb0f172ef87af2c765b6e7762a

    • SSDEEP

      12288:OtOw6BaN6FggLbrQXbR7jqkf1Hm7tJc0FS3jicGWVSI7dMua43Ek0cIHAN4:A6B26LaRFdGJm0Q3WKVSwdr13Ek0VA

    Score
    7/10
    spywarestealerdiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks