Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/06/2024, 05:43

General

  • Target

    2024-06-04_178648ae8ae2217cb4678d29b34cb7e9_bkransomware.exe

  • Size

    637KB

  • MD5

    178648ae8ae2217cb4678d29b34cb7e9

  • SHA1

    2631691e1914e6a744d3db77c7b94c52a6979834

  • SHA256

    49bf4512604026720c7b24d126052604f6de74b5f899506d11486afe7638b955

  • SHA512

    37caf761f19646936fb12119fca76cbc5ae61cc2ac512c72c4b8ebfdc57869686e7920d8f1f26c0192a8d8435bfd78631b4bd13bcbeb45d3712e156b61437ac4

  • SSDEEP

    12288:92Ka2pRmH6ysvWsmYDMtNhkxh3dfhg4OQYZeVHgMkakT/xdV+hoJ/R:9fvlmYDMt0ZuZeVeT/xX+hoJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-04_178648ae8ae2217cb4678d29b34cb7e9_bkransomware.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-04_178648ae8ae2217cb4678d29b34cb7e9_bkransomware.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:2540

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Local\Temp\TMSetup.txt

          Filesize

          4KB

          MD5

          e1bd2d4ae3a55cfdc5aef9ab70576fa6

          SHA1

          314bf249a9682919002ba6b62b2e4ded44e84a81

          SHA256

          13bd76ed590d4b163b13ea9d950102097766e0693c75a04ea11b2a9b89891a10

          SHA512

          792b3bc2ece370e49fa0b89a526830ad8a9994626becdaaa9d1334a608c9f584507bc0ba48b9a3028eeab7a46ae401f3cd662e3617d4e46ed36c065d82465c86

        • C:\Users\Admin\AppData\Local\Temp\TMSetup.txt

          Filesize

          3KB

          MD5

          f30c0e4f9677c1bc5386234a16252b35

          SHA1

          ed9f0deb7c9a9b150c6305d4862b4de19406ae78

          SHA256

          11c13655f5a40426c3a55151b1230fdcb2e3a504096cab2eafe3f49b56ae75fc

          SHA512

          bff88205be69cbfbfb6039e2bee6bde85175d946561a3f291fb8ccbbd877f2032dc047bfe98730bed278a281d1546a972c12d787d3fe1e49be077f1f44e73322