General

  • Target

    2024-06-12_2b23162d5b374f3e62854fc634b374a5_bkransomware

  • Size

    74KB

  • Sample

    240612-rv4hassbpp

  • MD5

    2b23162d5b374f3e62854fc634b374a5

  • SHA1

    54ba61dbee5d7b7afdaf1945d8447f7b9c2aecae

  • SHA256

    680ea0b10007510bf1fb7ee902a991d54af502de658fdca1d04d56466f2673da

  • SHA512

    7ba0d9337f69f32c82cb279261a121b6cc910435fedb55e5130405942703535a777e64d82144b3793f9ba9e3a24f5eaa529c90939c4a6cf0ba43979212448ac3

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTkVR:ZhpAyazIlyazTMR

Malware Config

Targets

    • Target

      2024-06-12_2b23162d5b374f3e62854fc634b374a5_bkransomware

    • Size

      74KB

    • MD5

      2b23162d5b374f3e62854fc634b374a5

    • SHA1

      54ba61dbee5d7b7afdaf1945d8447f7b9c2aecae

    • SHA256

      680ea0b10007510bf1fb7ee902a991d54af502de658fdca1d04d56466f2673da

    • SHA512

      7ba0d9337f69f32c82cb279261a121b6cc910435fedb55e5130405942703535a777e64d82144b3793f9ba9e3a24f5eaa529c90939c4a6cf0ba43979212448ac3

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazTkVR:ZhpAyazIlyazTMR

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks