General

  • Target

    2024-05-30_499a18c448af539fe4561a0c515912ce_bkransomware

  • Size

    712KB

  • Sample

    240530-zygrpshh2y

  • MD5

    499a18c448af539fe4561a0c515912ce

  • SHA1

    d83687390090490a44c81ae9e58aeae62253b852

  • SHA256

    55630944364a787423468fc12fee121155a59d744bf9b42bedbb4024942dd9ee

  • SHA512

    0d6e703472dfb83e50021cbb217c530f82354848fda1a600b319fe67279fac43e2259c4a13f9beab3bfd712e2f21b6de8af1fee63d3b1c67d71dd92c26d38481

  • SSDEEP

    12288:ktOw6BaL6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:66BA6J17W8CX32+KJNA80T

Score
7/10

Malware Config

Targets

    • Target

      2024-05-30_499a18c448af539fe4561a0c515912ce_bkransomware

    • Size

      712KB

    • MD5

      499a18c448af539fe4561a0c515912ce

    • SHA1

      d83687390090490a44c81ae9e58aeae62253b852

    • SHA256

      55630944364a787423468fc12fee121155a59d744bf9b42bedbb4024942dd9ee

    • SHA512

      0d6e703472dfb83e50021cbb217c530f82354848fda1a600b319fe67279fac43e2259c4a13f9beab3bfd712e2f21b6de8af1fee63d3b1c67d71dd92c26d38481

    • SSDEEP

      12288:ktOw6BaL6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:66BA6J17W8CX32+KJNA80T

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks