General

  • Target

    2024-06-01_98656f4f1f1203ee5b127d53a53c3b17_bkransomware

  • Size

    71KB

  • Sample

    240601-jat45adh7v

  • MD5

    98656f4f1f1203ee5b127d53a53c3b17

  • SHA1

    8bfe69791c35d9382ef99c36f9cbe2564f4c5288

  • SHA256

    d3cd85600b045f6836092c4494021a0b3a25324b85acf05a0154cc31e7742d77

  • SHA512

    0df6ff163eb065b4c5ed3a523385642c6d28a42132e4520b395a0758cdc0b0f3d7b011a170722619134ecd1450bb7669722d2324bbb32b2c5ddd60ae74818998

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTF:ZRpAyazIliazTF

Malware Config

Targets

    • Target

      2024-06-01_98656f4f1f1203ee5b127d53a53c3b17_bkransomware

    • Size

      71KB

    • MD5

      98656f4f1f1203ee5b127d53a53c3b17

    • SHA1

      8bfe69791c35d9382ef99c36f9cbe2564f4c5288

    • SHA256

      d3cd85600b045f6836092c4494021a0b3a25324b85acf05a0154cc31e7742d77

    • SHA512

      0df6ff163eb065b4c5ed3a523385642c6d28a42132e4520b395a0758cdc0b0f3d7b011a170722619134ecd1450bb7669722d2324bbb32b2c5ddd60ae74818998

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTF:ZRpAyazIliazTF

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks