Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
08-06-2024 11:26
General
-
Target
2024-06-08_314ac4d61eb813f434d822955831ca5a_bkransomware.exe
-
Size
1017KB
-
MD5
314ac4d61eb813f434d822955831ca5a
-
SHA1
807db3a3fc1cdfb8f46d4e3dc9f4f5f4e026e4b7
-
SHA256
993824a325d55f77818a4c9860d0cfe7ff0e2217354b32397b17d1e1212fc474
-
SHA512
80ddbcb8165a0c441f4c0a15bffb0fb645e0f2e7531e90cd0e341ad13b852b46b92ceeae46e7249d98d1aad64dc9a8c78d22789df47a8506f5e171abea667650
-
SSDEEP
12288:m2lWRP5hA9PRWg9oZI3XPWvOYRcDRJZ4w8qIV8mQR8XZi/mWcSjpI0Tkdure6:m2lm54R8W+vxWJq0Q7QqtWLjXTqM
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
-
Drops file in System32 directory 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-08_314ac4d61eb813f434d822955831ca5a_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-08_314ac4d61eb813f434d822955831ca5a_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
644KB
MD5ccd820cf5dfd320670dd1f024f8fd99c
SHA1aa43d58115b21819a841112577fa4be085baf725
SHA256148beaceb90671a40479292381d69b43895d136e02f4649d6fba3ecbed99d327
SHA51234ea54d996efa1ad7f2a1dbbfee6ef2ba8caa325d21156420fb566b24cfe18dadc7a83463f6c5a8312a031195fe4f8cf901acc868872c9798ea843fb04823478
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
1.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.0MB