77f45d981de5af5f78716e5ddac1303cbe8df01d86f2982511e4bd5a70091833 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_c4bf2ce30dcfa4ff15f52d371a5148f6_bkransomware
Size

24.4MB
Sample

240601-en7j6ahd7y
MD5

c4bf2ce30dcfa4ff15f52d371a5148f6
SHA1

eaa34e5e6e0ab530826ed100c90ad997cf9ca2b3
SHA256

77f45d981de5af5f78716e5ddac1303cbe8df01d86f2982511e4bd5a70091833
SHA512

7e6a625bb78e73482dc08f36cb1906fa8394a2cb34a99d2582cc24ce9740de2eda3f80d7e74faec09b4a74a787d223b6ccc367aaa600c0d7c766dd09330c1630
SSDEEP

393216:6uC9urQ3ijEsuxvOeYJGSUa7ZVX8OcG2LeJ9YH0DHG7uVfzcuy2pbqqWz9MmJtht:Mu03sRLMOb3VVfzckpuRMmBAaB

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-06-01_c4bf2ce30dcfa4ff15f52d371a5148f6_bkransomware
- Size
  
  24.4MB
- MD5
  
  c4bf2ce30dcfa4ff15f52d371a5148f6
- SHA1
  
  eaa34e5e6e0ab530826ed100c90ad997cf9ca2b3
- SHA256
  
  77f45d981de5af5f78716e5ddac1303cbe8df01d86f2982511e4bd5a70091833
- SHA512
  
  7e6a625bb78e73482dc08f36cb1906fa8394a2cb34a99d2582cc24ce9740de2eda3f80d7e74faec09b4a74a787d223b6ccc367aaa600c0d7c766dd09330c1630
- SSDEEP
  
  393216:6uC9urQ3ijEsuxvOeYJGSUa7ZVX8OcG2LeJ9YH0DHG7uVfzcuy2pbqqWz9MmJtht:Mu03sRLMOb3VVfzckpuRMmBAaB
Score

7^/10

discovery persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2

discoverypersistencespywarestealer