General

  • Target

    2024-06-02_0400859d695f004277ae0e5194c1290c_bkransomware

  • Size

    96KB

  • Sample

    240602-f1zkracc71

  • MD5

    0400859d695f004277ae0e5194c1290c

  • SHA1

    447829f79ff9d6f793c110d79b01caf8590a0823

  • SHA256

    8b0acd1471c5fd2d1bcc67f466ec5b4cf3f0eb63a5472c88209b746a986ce7b9

  • SHA512

    11761ff3b1463790f610e802593570522460692529fc32a02becb9bfd24734824108979cc564b74482ded5643bff8de29c5023448f5d2f6016b5df128426365b

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTBymlnk3XJwvxVGxB4:ZhpAyazIlyazTByQnC5w5VGz4

Malware Config

Targets

    • Target

      2024-06-02_0400859d695f004277ae0e5194c1290c_bkransomware

    • Size

      96KB

    • MD5

      0400859d695f004277ae0e5194c1290c

    • SHA1

      447829f79ff9d6f793c110d79b01caf8590a0823

    • SHA256

      8b0acd1471c5fd2d1bcc67f466ec5b4cf3f0eb63a5472c88209b746a986ce7b9

    • SHA512

      11761ff3b1463790f610e802593570522460692529fc32a02becb9bfd24734824108979cc564b74482ded5643bff8de29c5023448f5d2f6016b5df128426365b

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTBymlnk3XJwvxVGxB4:ZhpAyazIlyazTByQnC5w5VGz4

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks