General

  • Target

    2024-06-01_c00a7d57cda81d9cde0d157e77488518_bkransomware

  • Size

    71KB

  • Sample

    240601-hhv6qadg67

  • MD5

    c00a7d57cda81d9cde0d157e77488518

  • SHA1

    c3478813781cbad1bd30aeb7d7a2d997b16c250b

  • SHA256

    8a9c9e6d799371eea9bcc1c5725f48dd255fa7abf69093166b75033b5ea43eef

  • SHA512

    da984e5e3e03d2b835e555b90249ff73e628dedc095938d1688059dac62a8cfc6cf423079ccc18a55db809630f6ca2a81e7a44e841cef587e27deecd286c828d

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTob:ZRpAyazIliazTob

Malware Config

Targets

    • Target

      2024-06-01_c00a7d57cda81d9cde0d157e77488518_bkransomware

    • Size

      71KB

    • MD5

      c00a7d57cda81d9cde0d157e77488518

    • SHA1

      c3478813781cbad1bd30aeb7d7a2d997b16c250b

    • SHA256

      8a9c9e6d799371eea9bcc1c5725f48dd255fa7abf69093166b75033b5ea43eef

    • SHA512

      da984e5e3e03d2b835e555b90249ff73e628dedc095938d1688059dac62a8cfc6cf423079ccc18a55db809630f6ca2a81e7a44e841cef587e27deecd286c828d

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTob:ZRpAyazIliazTob

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks