8419acf61acbf6418a8c8908f8e8cf50483f3a0972b1f5339fbeb8b508f4dd61 | Triage

Sharing

General

Target

2024-06-01_00a331d03de7fc87c812fb558132986e_bkransomware
Size

71KB
Sample

240601-g5kstsce7x
MD5

00a331d03de7fc87c812fb558132986e
SHA1

f3c6a6c61d1444d8260e981c09a3da2da0896949
SHA256

8419acf61acbf6418a8c8908f8e8cf50483f3a0972b1f5339fbeb8b508f4dd61
SHA512

10e05d8f4d7e96af8d650cd5b752a37e30c42ae8dde9b2ac8801398ef180792ac7289903890e2a76bd96e49a45c4ed8a4b922e103054c5090f8c4ee32200a55a
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTFK:ZRpAyazIliazTg

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-06-01_00a331d03de7fc87c812fb558132986e_bkransomware
- Size
  
  71KB
- MD5
  
  00a331d03de7fc87c812fb558132986e
- SHA1
  
  f3c6a6c61d1444d8260e981c09a3da2da0896949
- SHA256
  
  8419acf61acbf6418a8c8908f8e8cf50483f3a0972b1f5339fbeb8b508f4dd61
- SHA512
  
  10e05d8f4d7e96af8d650cd5b752a37e30c42ae8dde9b2ac8801398ef180792ac7289903890e2a76bd96e49a45c4ed8a4b922e103054c5090f8c4ee32200a55a
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTFK:ZRpAyazIliazTg
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer