Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 08:15

General

  • Target

    2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe

  • Size

    1.1MB

  • MD5

    fbc2d221a0759e5cb8048681af278c02

  • SHA1

    f7567153ea595e4f40d809b6fd252184ff359c32

  • SHA256

    6f4bed0b251bf624fb17a543c2fc6d225f5ca70cde3401ef9e36aeb8154cb4ad

  • SHA512

    306275eea8c77763a01553b7b5544abda54b07614a4650ef00de1dfcc5eb579c30c0d7804d6dd483abbd9e91253aff7085be9410b551a3d3ec0a339675cb7ef5

  • SSDEEP

    12288:T5wSQnSSD0Hv7zvSHMjxIei4dAVXZy4dcbYMfeIELdEYeu+Z4N4yTJJcvaFNx4Ee:T55IekXZy4ibYNIMV+a/Wt

Score
1/10

Malware Config

Signatures

  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-28_fbc2d221a0759e5cb8048681af278c02_bkransomware.exe"
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\KoclaUpdate\info.bin

    Filesize

    2B

    MD5

    06d49632c9dc9bcb62aeaef99612ba6b

    SHA1

    e91fe173f59b063d620a934ce1a010f2b114c1f3

    SHA256

    e79e418e48623569d75e2a7b09ae88ed9b77b126a445b9ff9dc6989a08efa079

    SHA512

    849b2f3f63322343fddc5a3c8da8f07e4034ee4d5eb210a5ad9db9e33b6aec18dea81836a87f9226a4636c6c77893b0bd3408f6d1fe225bb0907c556a8111355

  • C:\Users\Admin\AppData\Roaming\KoclaUpdate\log1.txt

    Filesize

    509B

    MD5

    ae22315aad8544c90ed0bf34449efeaf

    SHA1

    c9bc90d7fbf906c292a02e39c409e45fd2ec2a57

    SHA256

    dcda397d69bd3e8640d9e2b452676e6b753905e8adb28d0797dd3284837ddcee

    SHA512

    eaad141dff83167084c3e6e1694698b880a7d8e20c5172013e913d4b6174240e24715a94e16b562affa47117c8f23afedb8699db422a15c939a6f5f3c8c8a95c