General

  • Target

    2024-06-08_490cc71f335c60d7e0655c8258dba016_bkransomware

  • Size

    71KB

  • Sample

    240608-zby3gafh3t

  • MD5

    490cc71f335c60d7e0655c8258dba016

  • SHA1

    41d67dccb05c9baeb4b9bdc6263ad1b2a1caee77

  • SHA256

    ab0f890a4d3ebd0611f77ff7018453eac882a131a815b68798f73ff45d5c4fa3

  • SHA512

    32e6bb4c1644881b326b7e2eba921e101c7472a5533edc8372e9a18c804fb1c9272958e2b88baa7f3cc88ea864dce4b8c61d6645d76dda70dbd985f66656824f

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT7:ZRpAyazIliazT7

Malware Config

Targets

    • Target

      2024-06-08_490cc71f335c60d7e0655c8258dba016_bkransomware

    • Size

      71KB

    • MD5

      490cc71f335c60d7e0655c8258dba016

    • SHA1

      41d67dccb05c9baeb4b9bdc6263ad1b2a1caee77

    • SHA256

      ab0f890a4d3ebd0611f77ff7018453eac882a131a815b68798f73ff45d5c4fa3

    • SHA512

      32e6bb4c1644881b326b7e2eba921e101c7472a5533edc8372e9a18c804fb1c9272958e2b88baa7f3cc88ea864dce4b8c61d6645d76dda70dbd985f66656824f

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazT7:ZRpAyazIliazT7

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks