General

  • Target

    2024-06-03_ca150b2046f2a48fd412bd097c113b34_bkransomware

  • Size

    71KB

  • Sample

    240603-hh9n4sgd22

  • MD5

    ca150b2046f2a48fd412bd097c113b34

  • SHA1

    0d11354261fc61fa0c219477f7ffd3aaa741700b

  • SHA256

    ab49232d37cff2674e72ca2edce8c52ffc0cccbee6dcefedd4398bec6a7ab94b

  • SHA512

    9a1d9f1c95a33f67bc273ad5bd1f34e83804b1b86477ca5279bfaffdeb2b5084cecd37f37d88cd08e54f51349daf49abb64b025b44d0e2cbb5b547fd1515615e

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT6:ZRpAyazIliazT6

Malware Config

Targets

    • Target

      2024-06-03_ca150b2046f2a48fd412bd097c113b34_bkransomware

    • Size

      71KB

    • MD5

      ca150b2046f2a48fd412bd097c113b34

    • SHA1

      0d11354261fc61fa0c219477f7ffd3aaa741700b

    • SHA256

      ab49232d37cff2674e72ca2edce8c52ffc0cccbee6dcefedd4398bec6a7ab94b

    • SHA512

      9a1d9f1c95a33f67bc273ad5bd1f34e83804b1b86477ca5279bfaffdeb2b5084cecd37f37d88cd08e54f51349daf49abb64b025b44d0e2cbb5b547fd1515615e

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT6:ZRpAyazIliazT6

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks