General

  • Target

    2024-06-12_474da67bbb15a3401dd0889bc662bf00_bkransomware

  • Size

    71KB

  • Sample

    240612-rzsatsydke

  • MD5

    474da67bbb15a3401dd0889bc662bf00

  • SHA1

    eccfdc83494e967bd25f4b4ff0dba2accbb51393

  • SHA256

    c6df7f22be01adea63114cb802ab6997558233bc1d9b24e3e1cd2e9062842424

  • SHA512

    6ff3024f2ddd48d80b83505ac7b9366e68147ed430570013745e43f7fea32746400e5159fcfd7035baa800b250db47ec2e0a77f6c2b3b078c160983ebb24cfae

  • SSDEEP

    1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT8:ZhpAyazIlyazT8

Malware Config

Targets

    • Target

      2024-06-12_474da67bbb15a3401dd0889bc662bf00_bkransomware

    • Size

      71KB

    • MD5

      474da67bbb15a3401dd0889bc662bf00

    • SHA1

      eccfdc83494e967bd25f4b4ff0dba2accbb51393

    • SHA256

      c6df7f22be01adea63114cb802ab6997558233bc1d9b24e3e1cd2e9062842424

    • SHA512

      6ff3024f2ddd48d80b83505ac7b9366e68147ed430570013745e43f7fea32746400e5159fcfd7035baa800b250db47ec2e0a77f6c2b3b078c160983ebb24cfae

    • SSDEEP

      1536:Fc897UsWjcd9w+AyabjDbxE+MwmvlDuazT8:ZhpAyazIlyazT8

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks