Overview

overview

7

Static

static

3

2024-05-29...re.exe

windows7-x64

7

2024-05-29...re.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-29_c5e332f3b80f7b3f549403b56f9c7750_bkransomware

  • Size

    518KB

  • Sample

    240529-ktnbcsaa43

  • MD5

    c5e332f3b80f7b3f549403b56f9c7750

  • SHA1

    21ded9005a0c327d7cc2f8a6541cda2e76c44806

  • SHA256

    22e8b0e5b9cd739f2467297fa036898d334428f6570d64710769f3ca3a69fb34

  • SHA512

    fcc3ca9a9720a690106a9b23efaa5efc8b8986d96c9ed84b533944fbc80582bb38b9d07c20927067d5e56c0c0db4fbbe954200a744f7284ba29c0bc714d60354

  • SSDEEP

    12288:xC0s2H1l9Tj4t0D8E9gpX0sVc/DfQuOt5vUkfj2GDq:DsUl9T0t0D8E9+b6/rQJtakfiGDq

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      2024-05-29_c5e332f3b80f7b3f549403b56f9c7750_bkransomware

    • Size

      518KB

    • MD5

      c5e332f3b80f7b3f549403b56f9c7750

    • SHA1

      21ded9005a0c327d7cc2f8a6541cda2e76c44806

    • SHA256

      22e8b0e5b9cd739f2467297fa036898d334428f6570d64710769f3ca3a69fb34

    • SHA512

      fcc3ca9a9720a690106a9b23efaa5efc8b8986d96c9ed84b533944fbc80582bb38b9d07c20927067d5e56c0c0db4fbbe954200a744f7284ba29c0bc714d60354

    • SSDEEP

      12288:xC0s2H1l9Tj4t0D8E9gpX0sVc/DfQuOt5vUkfj2GDq:DsUl9T0t0D8E9+b6/rQJtakfiGDq

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks