Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 08:15
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe
-
Size
1.1MB
-
MD5
fbc2d221a0759e5cb8048681af278c02
-
SHA1
f7567153ea595e4f40d809b6fd252184ff359c32
-
SHA256
6f4bed0b251bf624fb17a543c2fc6d225f5ca70cde3401ef9e36aeb8154cb4ad
-
SHA512
306275eea8c77763a01553b7b5544abda54b07614a4650ef00de1dfcc5eb579c30c0d7804d6dd483abbd9e91253aff7085be9410b551a3d3ec0a339675cb7ef5
-
SSDEEP
12288:T5wSQnSSD0Hv7zvSHMjxIei4dAVXZy4dcbYMfeIELdEYeu+Z4N4yTJJcvaFNx4Ee:T55IekXZy4ibYNIMV+a/Wt
Malware Config
Signatures
-
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1960 2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe -
Suspicious use of SendNotifyMessage 1 IoCs
pid Process 1960 2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2B
MD506d49632c9dc9bcb62aeaef99612ba6b
SHA1e91fe173f59b063d620a934ce1a010f2b114c1f3
SHA256e79e418e48623569d75e2a7b09ae88ed9b77b126a445b9ff9dc6989a08efa079
SHA512849b2f3f63322343fddc5a3c8da8f07e4034ee4d5eb210a5ad9db9e33b6aec18dea81836a87f9226a4636c6c77893b0bd3408f6d1fe225bb0907c556a8111355
-
Filesize
509B
MD5ae22315aad8544c90ed0bf34449efeaf
SHA1c9bc90d7fbf906c292a02e39c409e45fd2ec2a57
SHA256dcda397d69bd3e8640d9e2b452676e6b753905e8adb28d0797dd3284837ddcee
SHA512eaad141dff83167084c3e6e1694698b880a7d8e20c5172013e913d4b6174240e24715a94e16b562affa47117c8f23afedb8699db422a15c939a6f5f3c8c8a95c