General

  • Target

    2024-06-03_f48cc34a56af6db153fc1c29a0dab89f_bkransomware

  • Size

    72KB

  • Sample

    240603-hlem5sfc7s

  • MD5

    f48cc34a56af6db153fc1c29a0dab89f

  • SHA1

    60625b88cf8b707ce984430c9047a1b1034c0be2

  • SHA256

    333fe47ab24ddeb05c85270084b42799c34c61f48c690814b2d44e4cf825e224

  • SHA512

    10fe5cea9e3ebd1d10fa02058a04e79ecc6776f5b2675bb72df64047e2afe6a764da6693f875e0c60b8025f6d566e7a848cae8d634d70f0bd9508ead2adc5782

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTTjlp:ZRpAyazIliazTnlp

Malware Config

Targets

    • Target

      2024-06-03_f48cc34a56af6db153fc1c29a0dab89f_bkransomware

    • Size

      72KB

    • MD5

      f48cc34a56af6db153fc1c29a0dab89f

    • SHA1

      60625b88cf8b707ce984430c9047a1b1034c0be2

    • SHA256

      333fe47ab24ddeb05c85270084b42799c34c61f48c690814b2d44e4cf825e224

    • SHA512

      10fe5cea9e3ebd1d10fa02058a04e79ecc6776f5b2675bb72df64047e2afe6a764da6693f875e0c60b8025f6d566e7a848cae8d634d70f0bd9508ead2adc5782

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTTjlp:ZRpAyazIliazTnlp

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks