General

  • Target

    2024-06-12_5567ea406c6fd92642f2ad36d755e768_bkransomware

  • Size

    96KB

  • Sample

    240612-r1sb8asdnk

  • MD5

    5567ea406c6fd92642f2ad36d755e768

  • SHA1

    aaf4250efa42050681e4ead77e3d1da256e892de

  • SHA256

    e81a2a29df897a30fafc879a18fb42f8a2019d7d5daf41925ee1920002d812a9

  • SHA512

    7e5c9637054925ede7835b606d3fb22b664e1690af6bbce26e4f4b38cb040c2236a7eb8afcb1c543f6fc8fd299768691f62fb6d6b4bbe2af560a7a84e6d694e3

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTr/nhExPzK45U:ZhpAyazIlyazTrK845U

Malware Config

Targets

    • Target

      2024-06-12_5567ea406c6fd92642f2ad36d755e768_bkransomware

    • Size

      96KB

    • MD5

      5567ea406c6fd92642f2ad36d755e768

    • SHA1

      aaf4250efa42050681e4ead77e3d1da256e892de

    • SHA256

      e81a2a29df897a30fafc879a18fb42f8a2019d7d5daf41925ee1920002d812a9

    • SHA512

      7e5c9637054925ede7835b606d3fb22b664e1690af6bbce26e4f4b38cb040c2236a7eb8afcb1c543f6fc8fd299768691f62fb6d6b4bbe2af560a7a84e6d694e3

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTr/nhExPzK45U:ZhpAyazIlyazTrK845U

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks