5167d216151b36e6085a5db10ab5396152be0e4e54fe7f5673fdc24666e3d347 | Triage

Sharing

General

Target

2024-06-01_74f4da336c2a3d079d593059e81d3fab_bkransomware
Size

71KB
Sample

240601-s25jlsgd49
MD5

74f4da336c2a3d079d593059e81d3fab
SHA1

b51245c34fdb5015b573acf7fca00c3e69a0a8a8
SHA256

5167d216151b36e6085a5db10ab5396152be0e4e54fe7f5673fdc24666e3d347
SHA512

28e36599c5007b0a1137cc3be38fb589ffeb266d96f2c5f9be8f1ca74056aa4988cdff58caeb19caaf81cf9c14dc4d1ab009ca44b3bd4407bb464249df0a24ac
SSDEEP

1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTr:ZRpAyazIliazTr

Score

7^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  2024-06-01_74f4da336c2a3d079d593059e81d3fab_bkransomware
- Size
  
  71KB
- MD5
  
  74f4da336c2a3d079d593059e81d3fab
- SHA1
  
  b51245c34fdb5015b573acf7fca00c3e69a0a8a8
- SHA256
  
  5167d216151b36e6085a5db10ab5396152be0e4e54fe7f5673fdc24666e3d347
- SHA512
  
  28e36599c5007b0a1137cc3be38fb589ffeb266d96f2c5f9be8f1ca74056aa4988cdff58caeb19caaf81cf9c14dc4d1ab009ca44b3bd4407bb464249df0a24ac
- SSDEEP
  
  1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTr:ZRpAyazIliazTr
Score

7^/10

persistence spyware stealer
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer