General

  • Target

    2024-06-11_c9100e24525c1f2e337876503c9d8870_bkransomware

  • Size

    71KB

  • Sample

    240611-vqnstsvcqq

  • MD5

    c9100e24525c1f2e337876503c9d8870

  • SHA1

    298c101148822a76841a2487772eeedbaebb2d4a

  • SHA256

    55feac830401ee5c3fd6b86aeb4ee59cc38e5ac79a4d876b86eacaae6000a0e1

  • SHA512

    3b7bb115b4368bfd13de52a09bd0502ff8131bda8eb368c0f367e9d228714c918f8e38b2a10ad2e629f5db979034354642769af19437f8998e831c03d21e7717

  • SSDEEP

    1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTd:ZRpAyazIliazTd

Malware Config

Targets

    • Target

      2024-06-11_c9100e24525c1f2e337876503c9d8870_bkransomware

    • Size

      71KB

    • MD5

      c9100e24525c1f2e337876503c9d8870

    • SHA1

      298c101148822a76841a2487772eeedbaebb2d4a

    • SHA256

      55feac830401ee5c3fd6b86aeb4ee59cc38e5ac79a4d876b86eacaae6000a0e1

    • SHA512

      3b7bb115b4368bfd13de52a09bd0502ff8131bda8eb368c0f367e9d228714c918f8e38b2a10ad2e629f5db979034354642769af19437f8998e831c03d21e7717

    • SSDEEP

      1536:Fc8N7UsWjcd9w+AyabjDbxE+MwmvlzuazTd:ZRpAyazIliazTd

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks