General

  • Target

    2024-06-01_bd36c492a2595f1a585f14293b055ce2_bkransomware

  • Size

    213KB

  • Sample

    240601-hhfe9sda6v

  • MD5

    bd36c492a2595f1a585f14293b055ce2

  • SHA1

    daec30e72e765301479bb8f65e1a0bb18146b548

  • SHA256

    db4c857e28f7606d70ddb721e4e7da975d74086e0538f81151d12b7bad8efe7b

  • SHA512

    926eb571ca23a38f47a0bd9a29e5ac4897245b9d721aada7cd069dcb15fcaf980b08e5d811125b19e370b405c80ade56c510ead3bf217b7b23ac0b6187d9fdd0

  • SSDEEP

    3072:ZRpAyazIliazTTGqjsi3adEpMYTV6tla1GLrc/mfoey4h5CE3O5oKu/ZbFEvGy2k:xZ8aznh4i3aCFouGvc3eXhgCO230Oako

Malware Config

Targets

    • Target

      2024-06-01_bd36c492a2595f1a585f14293b055ce2_bkransomware

    • Size

      213KB

    • MD5

      bd36c492a2595f1a585f14293b055ce2

    • SHA1

      daec30e72e765301479bb8f65e1a0bb18146b548

    • SHA256

      db4c857e28f7606d70ddb721e4e7da975d74086e0538f81151d12b7bad8efe7b

    • SHA512

      926eb571ca23a38f47a0bd9a29e5ac4897245b9d721aada7cd069dcb15fcaf980b08e5d811125b19e370b405c80ade56c510ead3bf217b7b23ac0b6187d9fdd0

    • SSDEEP

      3072:ZRpAyazIliazTTGqjsi3adEpMYTV6tla1GLrc/mfoey4h5CE3O5oKu/ZbFEvGy2k:xZ8aznh4i3aCFouGvc3eXhgCO230Oako

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks